Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
webcam.txt.com.exe

Overview

General Information

Sample name:	webcam.txt.com.exe
Analysis ID:	1353116
MD5:	0e17dbec1904b7c10614bfb29ef758fd
SHA1:	b19765f00d764e9feae654c9223d124b1a874361
SHA256:	b9b8e6d43ce8770733b490d6b98c61f84ae5d5d9e170ada6f034128d0ba9085f
Tags:	exe
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (overwrites its own PE header)

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Creates files with lurking names (e.g. Crack.exe)

Drops PE files with a suspicious file extension

Drops executables to the windows directory (C:\Windows) and starts them

Found evasive API chain (may stop execution after checking mutex)

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file has nameless sections

Send many emails (e-Mail Spam)

Tries to resolve many domain names, but no domain seems valid

Abnormal high CPU Usage

Connects to many different domains

Contains functionality to dynamically determine API calls

Creates files inside the system directory

Deletes files inside the Windows folder

Detected potential crypto function

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops PE files to the windows directory (C:\Windows)

Found decision node followed by non-executed suspicious APIs

Found evasive API chain (date check)

Found large amount of non-executed APIs

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Sample execution stops while process was sleeping (likely an evasion)

Uses 32bit PE files

Uses SMTP (mail sending)

Uses code obfuscation techniques (call, push, ret)

Uses the system / local time for branch decision (may execute only at specific dates)

Classification

×

Process Tree

System is w10x64

webcam.txt.com.exe (PID: 6288 cmdline: C:\Users\user\Desktop\webcam.txt.com.exe MD5: 0E17DBEC1904B7C10614BFB29EF758FD)

winlogon.exe (PID: 2004 cmdline: "C:\Windows\winlogon.exe" -stealth MD5: 0E17DBEC1904B7C10614BFB29EF758FD)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

ETPRO TROJAN Worm.Mydoom spreading via SMTP 28 - Source IP: 192.168.2.4 - Destination IP: 172.253.115.27

Timestamp:	192.168.2.4172.253.115.2749738252810644 12/04/23-12:57:10.044750
SID:	2810644
Source Port:	49738
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom spreading via SMTP 25 - Source IP: 192.168.2.4 - Destination IP: 172.253.115.27

Timestamp:	192.168.2.4172.253.115.2749739252810641 12/04/23-12:57:10.143329
SID:	2810641
Source Port:	49739
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom spreading via SMTP 29 - Source IP: 192.168.2.4 - Destination IP: 85.187.148.2

Timestamp:	192.168.2.485.187.148.249748252810645 12/04/23-12:59:08.468348
SID:	2810645
Source Port:	49748
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom spreading via SMTP 25 - Source IP: 192.168.2.4 - Destination IP: 142.251.16.27

Timestamp:	192.168.2.4142.251.16.2749758252810641 12/04/23-12:59:56.847271
SID:	2810641
Source Port:	49758
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom spreading via SMTP 29 - Source IP: 192.168.2.4 - Destination IP: 142.251.16.27

Timestamp:	192.168.2.4142.251.16.2749767252810645 12/04/23-13:00:15.447869
SID:	2810645
Source Port:	49767
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom spreading via SMTP 30 - Source IP: 192.168.2.4 - Destination IP: 172.253.115.27

Timestamp:	192.168.2.4172.253.115.2749736252810646 12/04/23-12:57:10.151702
SID:	2810646
Source Port:	49736
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Win32/Netsky.P@mm spreading via SMTP 1 - Source IP: 192.168.2.4 - Destination IP: 142.251.16.27

Timestamp:	192.168.2.4142.251.16.2749759252806859 12/04/23-12:59:56.770680
SID:	2806859
Source Port:	49759
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom spreading via SMTP 25 - Source IP: 192.168.2.4 - Destination IP: 185.183.28.235

Timestamp:	192.168.2.4185.183.28.23549744252810641 12/04/23-12:58:05.193819
SID:	2810641
Source Port:	49744
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom spreading via SMTP 27 - Source IP: 192.168.2.4 - Destination IP: 142.251.167.26

Timestamp:	192.168.2.4142.251.167.2649763252810643 12/04/23-13:00:06.727890
SID:	2810643
Source Port:	49763
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom spreading via SMTP 28 - Source IP: 192.168.2.4 - Destination IP: 142.251.16.27

Timestamp:	192.168.2.4142.251.16.2749768252810644 12/04/23-13:00:15.434600
SID:	2810644
Source Port:	49768
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom spreading via SMTP 30 - Source IP: 192.168.2.4 - Destination IP: 67.195.204.73

Timestamp:	192.168.2.467.195.204.7349729252810646 12/04/23-12:56:39.672732
SID:	2810646
Source Port:	49729
Destination Port:	25
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: webcam.txt.com.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Ulead Keygen.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Cracks & Warez Archive.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Opera.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Photoshop 9 full.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Visual Studio Net Crack.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1000 Sex and more.rtf.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\The Sims 3 crack.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\DivX 7.0 final.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Premiere 9.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\IE58.1 full setup.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Smashing the stack.rtf.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\ACDSee 9.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Lightwave SE Update.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\3D Studio Max 3dsmax.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\WinAmp 12 full.exe	Avira: detection malicious, Label: WORM/Netsky.C
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ahead Nero 7.exe	Avira: detection malicious, Label: WORM/Netsky.C

Multi AV Scanner detection for dropped file

Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Cracks & Warez Archive.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\DivX 7.0 final.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\IE58.1 full setup.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Lightwave SE Update.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Opera.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Smashing the stack.rtf.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\The Sims 3 crack.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Ulead Keygen.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Visual Studio Net Crack.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\WinAmp 12 full.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1000 Sex and more.rtf.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\3D Studio Max 3dsmax.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\ACDSee 9.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Photoshop 9 full.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Premiere 9.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ahead Nero 7.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Best Matrix Screensaver.scr	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Clone DVD 5.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Cracks & Warez Archive.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dark Angels.pif	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dictionary English - France.doc.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\DivX 7.0 final.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Doom 3 Beta.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\E-Book Archive.rtf.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Full album.mp3.pif	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Gimp 1.5 Full with Key.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\How to hack.doc.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\IE58.1 full setup.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Keygen 4 all appz.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Learn Programming.doc.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Lightwave SE Update.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MS Service Pack 5.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Magix Video Deluxe 4.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft Office 2003 Crack.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft WinXP Crack.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Norton Antivirus 2004.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Photoshop 9 full.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Premiere 9.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Best Matrix Screensaver.scr	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Microsoft WinXP Crack.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Porno Screensaver.scr	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Teen Porn 16.jpg.pif	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Opera.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Partitionsmagic 9.0.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Porno Screensaver.scr	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\RFC Basics Full Edition.doc.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Screensaver.scr	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Serials.txt.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Smashing the stack.rtf.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Star Office 8.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Teen Porn 16.jpg.pif	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\The Sims 3 crack.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ulead Keygen.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Virii Sourcecode.scr	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Visual Studio Net Crack.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Win Longhorn Beta.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinAmp 12 full.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinXP eBook.doc.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Windows Sourcecode.doc.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\XXX hardcore pic.jpg.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Ahead Nero 7.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Doom 3 Beta.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\E-Book Archive.rtf.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\How to hack.doc.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Virii Sourcecode.scr	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\IE58.1 full setup.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Lightwave SE Update.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Smashing the stack.rtf.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\The Sims 3 crack.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Ulead Keygen.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\1000 Sex and more.rtf.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\3D Studio Max 3dsmax.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\ACDSee 9.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Adobe Photoshop 9 full.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Adobe Premiere 9.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Ahead Nero 7.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Best Matrix Screensaver.scr	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Clone DVD 5.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Cracks & Warez Archive.exe	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Dark Angels.pif	ReversingLabs: Detection: 94%
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Dictionary English - France.doc.exe	ReversingLabs: Detection: 94%

Multi AV Scanner detection for submitted file

Source: webcam.txt.com.exe	ReversingLabs: Detection: 94%
Source: webcam.txt.com.exe	Virustotal: Detection: 93%			Perma Link

Machine Learning detection for dropped file

Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Ulead Keygen.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Cracks & Warez Archive.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Opera.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Photoshop 9 full.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Visual Studio Net Crack.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1000 Sex and more.rtf.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\The Sims 3 crack.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\DivX 7.0 final.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Premiere 9.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\IE58.1 full setup.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Smashing the stack.rtf.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\ACDSee 9.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Lightwave SE Update.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\3D Studio Max 3dsmax.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\WinAmp 12 full.exe	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ahead Nero 7.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: webcam.txt.com.exe

Joe Sandbox ML: detected

Compliance

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\webcam.txt.com.exe	Unpacked PE file: 0.2.webcam.txt.com.exe.400000.0.unpack
Source: C:\Windows\winlogon.exe	Unpacked PE file: 1.2.winlogon.exe.400000.0.unpack

Source: webcam.txt.com.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_00402CEA FindFirstFileA,CharLowerBuffA,FindNextFileA,FindClose,		0_2_00402CEA
Source: C:\Windows\winlogon.exe	Code function: 1_2_00402CEA FindFirstFileA,FindNextFileA,		1_2_00402CEA

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2810646 ETPRO TROJAN Worm.Mydoom spreading via SMTP 30 192.168.2.4:49729 -> 67.195.204.73:25
Source: Traffic	Snort IDS: 2810644 ETPRO TROJAN Worm.Mydoom spreading via SMTP 28 192.168.2.4:49738 -> 172.253.115.27:25
Source: Traffic	Snort IDS: 2810641 ETPRO TROJAN Worm.Mydoom spreading via SMTP 25 192.168.2.4:49739 -> 172.253.115.27:25
Source: Traffic	Snort IDS: 2810646 ETPRO TROJAN Worm.Mydoom spreading via SMTP 30 192.168.2.4:49736 -> 172.253.115.27:25
Source: Traffic	Snort IDS: 2810641 ETPRO TROJAN Worm.Mydoom spreading via SMTP 25 192.168.2.4:49744 -> 185.183.28.235:25
Source: Traffic	Snort IDS: 2810645 ETPRO TROJAN Worm.Mydoom spreading via SMTP 29 192.168.2.4:49748 -> 85.187.148.2:25
Source: Traffic	Snort IDS: 2806859 ETPRO TROJAN Worm.Win32/Netsky.P@mm spreading via SMTP 1 192.168.2.4:49759 -> 142.251.16.27:25
Source: Traffic	Snort IDS: 2810641 ETPRO TROJAN Worm.Mydoom spreading via SMTP 25 192.168.2.4:49758 -> 142.251.16.27:25
Source: Traffic	Snort IDS: 2810643 ETPRO TROJAN Worm.Mydoom spreading via SMTP 27 192.168.2.4:49763 -> 142.251.167.26:25
Source: Traffic	Snort IDS: 2810644 ETPRO TROJAN Worm.Mydoom spreading via SMTP 28 192.168.2.4:49768 -> 142.251.16.27:25
Source: Traffic	Snort IDS: 2810645 ETPRO TROJAN Worm.Mydoom spreading via SMTP 29 192.168.2.4:49767 -> 142.251.16.27:25

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: 4x.png replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 4.0.0 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 3x.png replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bryson.demon.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 18.2.0 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 3.4.2 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8.5.22 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8.8.29 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 0.23.0 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 3.1.74 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 1.1.49-custom.16 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8.5.12 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 4.2.1 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2.4.2 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2x.png replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 1.10.295 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8.6.28 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 1.0.5 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8.2.42 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: src.dec.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 0.11.10 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mx2-lw-eu.apache.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8.110.4 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8.2.11 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 7.22.5 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8.13.17 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8.9.15 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2.2.11 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2.5.3 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 7.2.9 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2.6.33 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: z replaycode: Not Implemented (4)
Source: unknown	DNS traffic detected: query: 2.0.12 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 15.7.2 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 3.3.2 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 9.0.6 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2.2.15 replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2.2.0 replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 74

Source: Joe Sandbox View	IP Address: 173.228.157.41 173.228.157.41
Source: Joe Sandbox View	IP Address: 209.51.188.92 209.51.188.92

Source: global traffic	TCP traffic: 192.168.2.4:49729 -> 67.195.204.73:25
Source: global traffic	TCP traffic: 192.168.2.4:49742 -> 173.228.157.41:25
Source: global traffic	TCP traffic: 192.168.2.4:49743 -> 51.81.61.70:25
Source: global traffic	TCP traffic: 192.168.2.4:49744 -> 185.183.28.235:25
Source: global traffic	TCP traffic: 192.168.2.4:49746 -> 131.111.8.146:25
Source: global traffic	TCP traffic: 192.168.2.4:49747 -> 64.29.151.236:25
Source: global traffic	TCP traffic: 192.168.2.4:49748 -> 85.187.148.2:25
Source: global traffic	TCP traffic: 192.168.2.4:49749 -> 104.47.66.10:25
Source: global traffic	TCP traffic: 192.168.2.4:49750 -> 209.51.188.92:25
Source: global traffic	TCP traffic: 192.168.2.4:49752 -> 142.251.167.26:25
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 142.251.16.27:25
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 52.101.73.10:25
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 162.255.118.51:25
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 66.196.36.12:25
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 17.57.154.33:25

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Code function: 0_2_00401D9B setsockopt,send,recv,

Source: unknown

DNS traffic detected: queries for: yahoo.com

Source: webcam.txt.com.exe, 00000000.00000003.3133044573.0000000000545000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000003.3136511757.0000000000545000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000002.4112709818.0000000000545000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ads.msn.com/
Source: webcam.txt.com.exe, 00000000.00000003.1943099224.0000000002F21000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/
Source: webcam.txt.com.exe, 00000000.00000002.4112381428.0000000000500000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/jakearchibald/es6-promise/master/license
Source: webcam.txt.com.exe, 00000000.00000002.4114021770.0000000002F20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spdx.org/licenses/mit.html)
Source: webcam.txt.com.exe, 00000000.00000002.4112381428.0000000000500000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/92c234f1-dc91-4dc1-925d-6c90fc3816d8
Source: webcam.txt.com.exe, 00000000.00000003.3133044573.0000000000545000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000003.3136511757.0000000000545000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000002.4112709818.0000000000545000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://videoadssdk.azurewebsites.net/api/vpaid?code=ormoexb1ssje12klg/9jqrbzzm42xq/dp1abfowaq7tvzd4

Spam, unwanted Advertisements and Ransom Demands

Send many emails (e-Mail Spam)

Source: SMTP

Network traffic detected: Mail traffic on many different IPs 18

System Summary

Creates files with lurking names (e.g. Crack.exe)

Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\Microsoft WinXP Crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Microsoft WinXP Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\Keygen 4 all appz.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Keygen 4 all appz.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\Cracks & Warez Archive.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Cracks & Warez Archive.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\Ulead Keygen.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Ulead Keygen.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\The Sims 3 crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\The Sims 3 crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\Keygen 4 all appz.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Keygen 4 all appz.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\Ulead Keygen.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Ulead Keygen.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\The Sims 3 crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\The Sims 3 crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\user\Ulead Keygen.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Ulead Keygen.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Microsoft WinXP Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\Microsoft Office 2003 Crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Microsoft Office 2003 Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Keygen 4 all appz.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\Visual Studio Net Crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Visual Studio Net Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Cracks & Warez Archive.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Ulead Keygen.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\The Sims 3 crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\Microsoft WinXP Crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Microsoft WinXP Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\Microsoft Office 2003 Crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Microsoft Office 2003 Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Keygen 4 all appz.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\Visual Studio Net Crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Visual Studio Net Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\Cracks & Warez Archive.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Cracks & Warez Archive.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Ulead Keygen.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\The Sims 3 crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\user\Microsoft WinXP Crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Microsoft WinXP Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\user\Microsoft Office 2003 Crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Microsoft Office 2003 Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\user\Keygen 4 all appz.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Keygen 4 all appz.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\user\Visual Studio Net Crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Visual Studio Net Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\user\Cracks & Warez Archive.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Cracks & Warez Archive.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Ulead Keygen.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: c:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\usoshared\logs\user\The Sims 3 crack.exe			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\The Sims 3 crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Microsoft WinXP Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Microsoft Office 2003 Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Keygen 4 all appz.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Visual Studio Net Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Cracks & Warez Archive.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Ulead Keygen.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\The Sims 3 crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Microsoft WinXP Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Microsoft Office 2003 Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Keygen 4 all appz.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Visual Studio Net Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Cracks & Warez Archive.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\Ulead Keygen.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\The Sims 3 crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Microsoft WinXP Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Microsoft Office 2003 Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Keygen 4 all appz.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Visual Studio Net Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Cracks & Warez Archive.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\Ulead Keygen.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Logs\User\The Sims 3 crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Microsoft WinXP Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Microsoft Office 2003 Crack.exe\:Zone.Identifier:$DATA			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Keygen 4 all appz.exe\:Zone.Identifier:$DATA			Jump to behavior

PE file has nameless sections

Source: webcam.txt.com.exe	Static PE information: section name:
Source: webcam.txt.com.exe	Static PE information: section name:
Source: Ahead Nero 7.exe.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe0.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe0.0.dr	Static PE information: section name:
Source: Serials.txt.exe.0.dr	Static PE information: section name:
Source: Serials.txt.exe.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe.0.dr	Static PE information: section name:
Source: Dark Angels.pif.0.dr	Static PE information: section name:
Source: Dark Angels.pif.0.dr	Static PE information: section name:
Source: Full album.mp3.pif.0.dr	Static PE information: section name:
Source: Full album.mp3.pif.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe1.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe1.0.dr	Static PE information: section name:
Source: winlogon.exe.0.dr	Static PE information: section name:
Source: winlogon.exe.0.dr	Static PE information: section name:
Source: Dark Angels.pif0.0.dr	Static PE information: section name:
Source: Dark Angels.pif0.0.dr	Static PE information: section name:
Source: Opera.exe.0.dr	Static PE information: section name:
Source: Opera.exe.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe0.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe0.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif0.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif0.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe0.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe0.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe0.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe0.0.dr	Static PE information: section name:
Source: Serials.txt.exe0.0.dr	Static PE information: section name:
Source: Serials.txt.exe0.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe.0.dr	Static PE information: section name:
Source: Full album.mp3.pif0.0.dr	Static PE information: section name:
Source: Full album.mp3.pif0.0.dr	Static PE information: section name:
Source: How to hack.doc.exe.0.dr	Static PE information: section name:
Source: How to hack.doc.exe.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe0.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe0.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe0.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe0.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe0.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe0.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe2.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe2.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe1.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe1.0.dr	Static PE information: section name:
Source: Full album.mp3.pif1.0.dr	Static PE information: section name:
Source: Full album.mp3.pif1.0.dr	Static PE information: section name:
Source: Serials.txt.exe1.0.dr	Static PE information: section name:
Source: Serials.txt.exe1.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe0.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe0.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe0.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe0.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe0.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe0.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe.0.dr	Static PE information: section name:
Source: How to hack.doc.exe0.0.dr	Static PE information: section name:
Source: How to hack.doc.exe0.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe0.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe0.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe0.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe0.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe1.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe1.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe1.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe1.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe2.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe2.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe1.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe1.0.dr	Static PE information: section name:
Source: Full album.mp3.pif2.0.dr	Static PE information: section name:
Source: Full album.mp3.pif2.0.dr	Static PE information: section name:
Source: How to hack.doc.exe1.0.dr	Static PE information: section name:
Source: How to hack.doc.exe1.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe1.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe1.0.dr	Static PE information: section name:
Source: Serials.txt.exe2.0.dr	Static PE information: section name:
Source: Serials.txt.exe2.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe1.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe1.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe0.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe0.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe0.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe0.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe0.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe0.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe0.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe0.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe.0.dr	Static PE information: section name:
Source: Star Office 8.exe.0.dr	Static PE information: section name:
Source: Star Office 8.exe.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe2.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe2.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe1.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe1.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe2.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe2.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe1.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe1.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe2.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe2.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe1.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe1.0.dr	Static PE information: section name:
Source: How to hack.doc.exe2.0.dr	Static PE information: section name:
Source: How to hack.doc.exe2.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe1.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe1.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe2.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe2.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe1.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe1.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe2.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe2.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe0.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe0.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe0.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe0.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe.0.dr	Static PE information: section name:
Source: ACDSee 9.exe.0.dr	Static PE information: section name:
Source: ACDSee 9.exe.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe0.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe0.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe2.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe2.0.dr	Static PE information: section name:
Source: Star Office 8.exe0.0.dr	Static PE information: section name:
Source: Star Office 8.exe0.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe2.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe2.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe0.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe0.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe2.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe2.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe0.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe0.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe2.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe2.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe1.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe1.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe2.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe2.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe1.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe1.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe1.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe1.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe0.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe0.0.dr	Static PE information: section name:
Source: Star Office 8.exe1.0.dr	Static PE information: section name:
Source: Star Office 8.exe1.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe0.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe0.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe1.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe1.0.dr	Static PE information: section name:
Source: ACDSee 9.exe0.0.dr	Static PE information: section name:
Source: ACDSee 9.exe0.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe1.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe1.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe0.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe0.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe2.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe2.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe0.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe0.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe2.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe2.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe1.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe1.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe1.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe1.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe.0.dr	Static PE information: section name:
Source: ACDSee 9.exe1.0.dr	Static PE information: section name:
Source: ACDSee 9.exe1.0.dr	Static PE information: section name:
Source: Opera.exe0.0.dr	Static PE information: section name:
Source: Opera.exe0.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe1.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe1.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe0.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe0.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe1.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe1.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe0.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe0.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe0.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe0.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe1.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe1.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe0.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe0.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif1.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif1.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe0.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe0.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe1.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe1.0.dr	Static PE information: section name:
Source: Opera.exe1.0.dr	Static PE information: section name:
Source: Opera.exe1.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe0.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe0.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe1.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe1.0.dr	Static PE information: section name:
Source: Serials.txt.exe3.0.dr	Static PE information: section name:
Source: Serials.txt.exe3.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe2.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe2.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe1.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe1.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe0.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe0.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe1.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe1.0.dr	Static PE information: section name:
Source: Dark Angels.pif1.0.dr	Static PE information: section name:
Source: Dark Angels.pif1.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe2.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe2.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe1.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe1.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif2.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif2.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe3.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe3.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe1.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe1.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe1.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe1.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe1.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe1.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe1.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe1.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe3.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe3.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif3.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif3.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe3.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe3.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe2.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe2.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe2.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe2.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe2.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe2.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif4.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif4.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe2.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe2.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe4.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe4.0.dr	Static PE information: section name:
Source: Dark Angels.pif2.0.dr	Static PE information: section name:
Source: Dark Angels.pif2.0.dr	Static PE information: section name:
Source: Full album.mp3.pif3.0.dr	Static PE information: section name:
Source: Full album.mp3.pif3.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe3.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe3.0.dr	Static PE information: section name:
Source: Serials.txt.exe4.0.dr	Static PE information: section name:
Source: Serials.txt.exe4.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe4.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe4.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe3.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe3.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe5.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe5.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe3.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe3.0.dr	Static PE information: section name:
Source: Dark Angels.pif3.0.dr	Static PE information: section name:
Source: Dark Angels.pif3.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe3.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe3.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe1.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe1.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe3.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe3.0.dr	Static PE information: section name:
Source: Opera.exe2.0.dr	Static PE information: section name:
Source: Opera.exe2.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe4.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe4.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe2.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe2.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe2.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe2.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe2.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe2.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe2.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe2.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe2.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe2.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe2.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe2.0.dr	Static PE information: section name:
Source: Serials.txt.exe5.0.dr	Static PE information: section name:
Source: Serials.txt.exe5.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe4.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe4.0.dr	Static PE information: section name:
Source: Full album.mp3.pif4.0.dr	Static PE information: section name:
Source: Full album.mp3.pif4.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe4.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe4.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe4.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe4.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe3.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe3.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif5.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif5.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe5.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe5.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe4.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe4.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe5.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe5.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe3.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe3.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe5.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe5.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe2.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe2.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe2.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe2.0.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\webcam.txt.com.exe

File created: C:\Windows\winlogon.exe

Jump to behavior

Source: C:\Users\user\Desktop\webcam.txt.com.exe

File deleted: C:\Windows\ranking.zip

Jump to behavior

Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_00401691		0_2_00401691
Source: C:\Windows\winlogon.exe	Code function: 1_2_00401691		1_2_00401691

Source: webcam.txt.com.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: classification engine

Classification label: mal100.spre.troj.evad.winEXE@2/1025@150/17

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Mutant created: \Sessions\1\BaseNamedObjects\[SkyNet.cz]SystemsMutex

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: webcam.txt.com.exe	ReversingLabs: Detection: 94%
Source: webcam.txt.com.exe	Virustotal: Detection: 93%

Source: C:\Users\user\Desktop\webcam.txt.com.exe

File read: C:\Users\user\Desktop\webcam.txt.com.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\webcam.txt.com.exe C:\Users\user\Desktop\webcam.txt.com.exe
Source: unknown	Process created: C:\Windows\winlogon.exe "C:\Windows\winlogon.exe" -stealth

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Data Obfuscation

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\webcam.txt.com.exe	Unpacked PE file: 0.2.webcam.txt.com.exe.400000.0.unpack
Source: C:\Windows\winlogon.exe	Unpacked PE file: 1.2.winlogon.exe.400000.0.unpack

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Code function: 0_2_004057EB LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

Source: webcam.txt.com.exe	Static PE information: section name:
Source: webcam.txt.com.exe	Static PE information: section name: .petite
Source: webcam.txt.com.exe	Static PE information: section name:
Source: Ahead Nero 7.exe.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe.0.dr	Static PE information: section name: .petite
Source: Ahead Nero 7.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe.0.dr	Static PE information: section name: .petite
Source: Microsoft Office 2003 Crack.exe.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif.0.dr	Static PE information: section name: .petite
Source: Teen Porn 16.jpg.pif.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe.0.dr	Static PE information: section name: .petite
Source: XXX hardcore pic.jpg.exe.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe.0.dr	Static PE information: section name: .petite
Source: Microsoft WinXP Crack.exe.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe.0.dr	Static PE information: section name: .petite
Source: The Sims 3 crack.exe.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe.0.dr	Static PE information: section name: .petite
Source: Lightwave SE Update.exe.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe.0.dr	Static PE information: section name: .petite
Source: Adobe Photoshop 9 full.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe0.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe0.0.dr	Static PE information: section name: .petite
Source: Microsoft Office 2003 Crack.exe0.0.dr	Static PE information: section name:
Source: Serials.txt.exe.0.dr	Static PE information: section name:
Source: Serials.txt.exe.0.dr	Static PE information: section name: .petite
Source: Serials.txt.exe.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe.0.dr	Static PE information: section name: .petite
Source: Adobe Premiere 9.exe.0.dr	Static PE information: section name:
Source: Dark Angels.pif.0.dr	Static PE information: section name:
Source: Dark Angels.pif.0.dr	Static PE information: section name: .petite
Source: Dark Angels.pif.0.dr	Static PE information: section name:
Source: Full album.mp3.pif.0.dr	Static PE information: section name:
Source: Full album.mp3.pif.0.dr	Static PE information: section name: .petite
Source: Full album.mp3.pif.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe.0.dr	Static PE information: section name: .petite
Source: Learn Programming.doc.exe.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe.0.dr	Static PE information: section name: .petite
Source: WinXP eBook.doc.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe1.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe1.0.dr	Static PE information: section name: .petite
Source: Microsoft Office 2003 Crack.exe1.0.dr	Static PE information: section name:
Source: winlogon.exe.0.dr	Static PE information: section name:
Source: winlogon.exe.0.dr	Static PE information: section name: .petite
Source: winlogon.exe.0.dr	Static PE information: section name:
Source: Dark Angels.pif0.0.dr	Static PE information: section name:
Source: Dark Angels.pif0.0.dr	Static PE information: section name: .petite
Source: Dark Angels.pif0.0.dr	Static PE information: section name:
Source: Opera.exe.0.dr	Static PE information: section name:
Source: Opera.exe.0.dr	Static PE information: section name: .petite
Source: Opera.exe.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe0.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe0.0.dr	Static PE information: section name: .petite
Source: Microsoft WinXP Crack.exe0.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif0.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif0.0.dr	Static PE information: section name: .petite
Source: Teen Porn 16.jpg.pif0.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe0.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe0.0.dr	Static PE information: section name: .petite
Source: Adobe Photoshop 9 full.exe0.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe0.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe0.0.dr	Static PE information: section name: .petite
Source: Adobe Premiere 9.exe0.0.dr	Static PE information: section name:
Source: Serials.txt.exe0.0.dr	Static PE information: section name:
Source: Serials.txt.exe0.0.dr	Static PE information: section name: .petite
Source: Serials.txt.exe0.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe.0.dr	Static PE information: section name: .petite
Source: E-Book Archive.rtf.exe.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe.0.dr	Static PE information: section name: .petite
Source: Doom 3 Beta.exe.0.dr	Static PE information: section name:
Source: Full album.mp3.pif0.0.dr	Static PE information: section name:
Source: Full album.mp3.pif0.0.dr	Static PE information: section name: .petite
Source: Full album.mp3.pif0.0.dr	Static PE information: section name:
Source: How to hack.doc.exe.0.dr	Static PE information: section name:
Source: How to hack.doc.exe.0.dr	Static PE information: section name: .petite
Source: How to hack.doc.exe.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe0.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe0.0.dr	Static PE information: section name: .petite
Source: XXX hardcore pic.jpg.exe0.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe0.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe0.0.dr	Static PE information: section name: .petite
Source: Ahead Nero 7.exe0.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe.0.dr	Static PE information: section name: .petite
Source: 1000 Sex and more.rtf.exe.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe0.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe0.0.dr	Static PE information: section name: .petite
Source: WinXP eBook.doc.exe0.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe.0.dr	Static PE information: section name: .petite
Source: 3D Studio Max 3dsmax.exe.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe.0.dr	Static PE information: section name: .petite
Source: Win Longhorn Beta.exe.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe2.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe2.0.dr	Static PE information: section name: .petite
Source: Microsoft Office 2003 Crack.exe2.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe1.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe1.0.dr	Static PE information: section name: .petite
Source: Ahead Nero 7.exe1.0.dr	Static PE information: section name:
Source: Full album.mp3.pif1.0.dr	Static PE information: section name:
Source: Full album.mp3.pif1.0.dr	Static PE information: section name: .petite
Source: Full album.mp3.pif1.0.dr	Static PE information: section name:
Source: Serials.txt.exe1.0.dr	Static PE information: section name:
Source: Serials.txt.exe1.0.dr	Static PE information: section name: .petite
Source: Serials.txt.exe1.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe0.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe0.0.dr	Static PE information: section name: .petite
Source: E-Book Archive.rtf.exe0.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe0.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe0.0.dr	Static PE information: section name: .petite
Source: Win Longhorn Beta.exe0.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe0.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe0.0.dr	Static PE information: section name: .petite
Source: Doom 3 Beta.exe0.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe.0.dr	Static PE information: section name: .petite
Source: Dictionary English - France.doc.exe.0.dr	Static PE information: section name:
Source: How to hack.doc.exe0.0.dr	Static PE information: section name:
Source: How to hack.doc.exe0.0.dr	Static PE information: section name: .petite
Source: How to hack.doc.exe0.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe.0.dr	Static PE information: section name: .petite
Source: RFC Basics Full Edition.doc.exe.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe0.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe0.0.dr	Static PE information: section name: .petite
Source: Learn Programming.doc.exe0.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe0.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe0.0.dr	Static PE information: section name: .petite
Source: 3D Studio Max 3dsmax.exe0.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe.0.dr	Static PE information: section name: .petite
Source: Keygen 4 all appz.exe.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe1.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe1.0.dr	Static PE information: section name: .petite
Source: Win Longhorn Beta.exe1.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe1.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe1.0.dr	Static PE information: section name: .petite
Source: WinXP eBook.doc.exe1.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe2.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe2.0.dr	Static PE information: section name: .petite
Source: Ahead Nero 7.exe2.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe1.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe1.0.dr	Static PE information: section name: .petite
Source: Learn Programming.doc.exe1.0.dr	Static PE information: section name:
Source: Full album.mp3.pif2.0.dr	Static PE information: section name:
Source: Full album.mp3.pif2.0.dr	Static PE information: section name: .petite
Source: Full album.mp3.pif2.0.dr	Static PE information: section name:
Source: How to hack.doc.exe1.0.dr	Static PE information: section name:
Source: How to hack.doc.exe1.0.dr	Static PE information: section name: .petite
Source: How to hack.doc.exe1.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe1.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe1.0.dr	Static PE information: section name: .petite
Source: Doom 3 Beta.exe1.0.dr	Static PE information: section name:
Source: Serials.txt.exe2.0.dr	Static PE information: section name:
Source: Serials.txt.exe2.0.dr	Static PE information: section name: .petite
Source: Serials.txt.exe2.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe1.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe1.0.dr	Static PE information: section name: .petite
Source: E-Book Archive.rtf.exe1.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe0.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe0.0.dr	Static PE information: section name: .petite
Source: Keygen 4 all appz.exe0.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe0.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe0.0.dr	Static PE information: section name: .petite
Source: Dictionary English - France.doc.exe0.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe.0.dr	Static PE information: section name: .petite
Source: Windows Sourcecode.doc.exe.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe0.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe0.0.dr	Static PE information: section name: .petite
Source: RFC Basics Full Edition.doc.exe0.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe.0.dr	Static PE information: section name: .petite
Source: Norton Antivirus 2004.exe.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe0.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe0.0.dr	Static PE information: section name: .petite
Source: 1000 Sex and more.rtf.exe0.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe.0.dr	Static PE information: section name: .petite
Source: Partitionsmagic 9.0.exe.0.dr	Static PE information: section name:
Source: Star Office 8.exe.0.dr	Static PE information: section name:
Source: Star Office 8.exe.0.dr	Static PE information: section name: .petite
Source: Star Office 8.exe.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe.0.dr	Static PE information: section name: .petite
Source: Magix Video Deluxe 4.exe.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe2.0.dr	Static PE information: section name:
Source: Win Longhorn Beta.exe2.0.dr	Static PE information: section name: .petite
Source: Win Longhorn Beta.exe2.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe1.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe1.0.dr	Static PE information: section name: .petite
Source: Keygen 4 all appz.exe1.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe2.0.dr	Static PE information: section name:
Source: WinXP eBook.doc.exe2.0.dr	Static PE information: section name: .petite
Source: WinXP eBook.doc.exe2.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe1.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe1.0.dr	Static PE information: section name: .petite
Source: 3D Studio Max 3dsmax.exe1.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe2.0.dr	Static PE information: section name:
Source: Learn Programming.doc.exe2.0.dr	Static PE information: section name: .petite
Source: Learn Programming.doc.exe2.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe1.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe1.0.dr	Static PE information: section name: .petite
Source: 1000 Sex and more.rtf.exe1.0.dr	Static PE information: section name:
Source: How to hack.doc.exe2.0.dr	Static PE information: section name:
Source: How to hack.doc.exe2.0.dr	Static PE information: section name: .petite
Source: How to hack.doc.exe2.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe1.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe1.0.dr	Static PE information: section name: .petite
Source: RFC Basics Full Edition.doc.exe1.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe2.0.dr	Static PE information: section name:
Source: Doom 3 Beta.exe2.0.dr	Static PE information: section name: .petite
Source: Doom 3 Beta.exe2.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe1.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe1.0.dr	Static PE information: section name: .petite
Source: Dictionary English - France.doc.exe1.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe2.0.dr	Static PE information: section name:
Source: E-Book Archive.rtf.exe2.0.dr	Static PE information: section name: .petite
Source: E-Book Archive.rtf.exe2.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe0.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe0.0.dr	Static PE information: section name: .petite
Source: Windows Sourcecode.doc.exe0.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe0.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe0.0.dr	Static PE information: section name: .petite
Source: Norton Antivirus 2004.exe0.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe.0.dr	Static PE information: section name: .petite
Source: Gimp 1.5 Full with Key.exe.0.dr	Static PE information: section name:
Source: ACDSee 9.exe.0.dr	Static PE information: section name:
Source: ACDSee 9.exe.0.dr	Static PE information: section name: .petite
Source: ACDSee 9.exe.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe.0.dr	Static PE information: section name: .petite
Source: Visual Studio Net Crack.exe.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe.0.dr	Static PE information: section name: .petite
Source: Cracks & Warez Archive.exe.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe0.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe0.0.dr	Static PE information: section name: .petite
Source: Magix Video Deluxe 4.exe0.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe2.0.dr	Static PE information: section name:
Source: Keygen 4 all appz.exe2.0.dr	Static PE information: section name: .petite
Source: Keygen 4 all appz.exe2.0.dr	Static PE information: section name:
Source: Star Office 8.exe0.0.dr	Static PE information: section name:
Source: Star Office 8.exe0.0.dr	Static PE information: section name: .petite
Source: Star Office 8.exe0.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe2.0.dr	Static PE information: section name:
Source: 3D Studio Max 3dsmax.exe2.0.dr	Static PE information: section name: .petite
Source: 3D Studio Max 3dsmax.exe2.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe0.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe0.0.dr	Static PE information: section name: .petite
Source: Partitionsmagic 9.0.exe0.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe2.0.dr	Static PE information: section name:
Source: 1000 Sex and more.rtf.exe2.0.dr	Static PE information: section name: .petite
Source: 1000 Sex and more.rtf.exe2.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe0.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe0.0.dr	Static PE information: section name: .petite
Source: Gimp 1.5 Full with Key.exe0.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe2.0.dr	Static PE information: section name:
Source: RFC Basics Full Edition.doc.exe2.0.dr	Static PE information: section name: .petite
Source: RFC Basics Full Edition.doc.exe2.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe1.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe1.0.dr	Static PE information: section name: .petite
Source: Norton Antivirus 2004.exe1.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe2.0.dr	Static PE information: section name:
Source: Dictionary English - France.doc.exe2.0.dr	Static PE information: section name: .petite
Source: Dictionary English - France.doc.exe2.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe1.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe1.0.dr	Static PE information: section name: .petite
Source: Windows Sourcecode.doc.exe1.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe.0.dr	Static PE information: section name: .petite
Source: Clone DVD 5.exe.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe.0.dr	Static PE information: section name: .petite
Source: MS Service Pack 5.exe.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe1.0.dr	Static PE information: section name:
Source: Magix Video Deluxe 4.exe1.0.dr	Static PE information: section name: .petite
Source: Magix Video Deluxe 4.exe1.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe0.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe0.0.dr	Static PE information: section name: .petite
Source: Cracks & Warez Archive.exe0.0.dr	Static PE information: section name:
Source: Star Office 8.exe1.0.dr	Static PE information: section name:
Source: Star Office 8.exe1.0.dr	Static PE information: section name: .petite
Source: Star Office 8.exe1.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe0.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe0.0.dr	Static PE information: section name: .petite
Source: Visual Studio Net Crack.exe0.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe1.0.dr	Static PE information: section name:
Source: Partitionsmagic 9.0.exe1.0.dr	Static PE information: section name: .petite
Source: Partitionsmagic 9.0.exe1.0.dr	Static PE information: section name:
Source: ACDSee 9.exe0.0.dr	Static PE information: section name:
Source: ACDSee 9.exe0.0.dr	Static PE information: section name: .petite
Source: ACDSee 9.exe0.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe1.0.dr	Static PE information: section name:
Source: Gimp 1.5 Full with Key.exe1.0.dr	Static PE information: section name: .petite
Source: Gimp 1.5 Full with Key.exe1.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe0.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe0.0.dr	Static PE information: section name: .petite
Source: MS Service Pack 5.exe0.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe2.0.dr	Static PE information: section name:
Source: Norton Antivirus 2004.exe2.0.dr	Static PE information: section name: .petite
Source: Norton Antivirus 2004.exe2.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe0.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe0.0.dr	Static PE information: section name: .petite
Source: Clone DVD 5.exe0.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe2.0.dr	Static PE information: section name:
Source: Windows Sourcecode.doc.exe2.0.dr	Static PE information: section name: .petite
Source: Windows Sourcecode.doc.exe2.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe.0.dr	Static PE information: section name: .petite
Source: WinAmp 12 full.exe.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe.0.dr	Static PE information: section name: .petite
Source: DivX 7.0 final.exe.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe.0.dr	Static PE information: section name: .petite
Source: Ulead Keygen.exe.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe1.0.dr	Static PE information: section name:
Source: Cracks & Warez Archive.exe1.0.dr	Static PE information: section name: .petite
Source: Cracks & Warez Archive.exe1.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe.0.dr	Static PE information: section name: .petite
Source: Smashing the stack.rtf.exe.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe1.0.dr	Static PE information: section name:
Source: Visual Studio Net Crack.exe1.0.dr	Static PE information: section name: .petite
Source: Visual Studio Net Crack.exe1.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe.0.dr	Static PE information: section name: .petite
Source: IE58.1 full setup.exe.0.dr	Static PE information: section name:
Source: ACDSee 9.exe1.0.dr	Static PE information: section name:
Source: ACDSee 9.exe1.0.dr	Static PE information: section name: .petite
Source: ACDSee 9.exe1.0.dr	Static PE information: section name:
Source: Opera.exe0.0.dr	Static PE information: section name:
Source: Opera.exe0.0.dr	Static PE information: section name: .petite
Source: Opera.exe0.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe1.0.dr	Static PE information: section name:
Source: MS Service Pack 5.exe1.0.dr	Static PE information: section name: .petite
Source: MS Service Pack 5.exe1.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe0.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe0.0.dr	Static PE information: section name: .petite
Source: DivX 7.0 final.exe0.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe1.0.dr	Static PE information: section name:
Source: Clone DVD 5.exe1.0.dr	Static PE information: section name: .petite
Source: Clone DVD 5.exe1.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe0.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe0.0.dr	Static PE information: section name: .petite
Source: WinAmp 12 full.exe0.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe0.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe0.0.dr	Static PE information: section name: .petite
Source: Ulead Keygen.exe0.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe1.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe1.0.dr	Static PE information: section name: .petite
Source: Adobe Premiere 9.exe1.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe0.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe0.0.dr	Static PE information: section name: .petite
Source: Smashing the stack.rtf.exe0.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif1.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif1.0.dr	Static PE information: section name: .petite
Source: Teen Porn 16.jpg.pif1.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe0.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe0.0.dr	Static PE information: section name: .petite
Source: IE58.1 full setup.exe0.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe1.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe1.0.dr	Static PE information: section name: .petite
Source: Microsoft WinXP Crack.exe1.0.dr	Static PE information: section name:
Source: Opera.exe1.0.dr	Static PE information: section name:
Source: Opera.exe1.0.dr	Static PE information: section name: .petite
Source: Opera.exe1.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe0.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe0.0.dr	Static PE information: section name: .petite
Source: The Sims 3 crack.exe0.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe1.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe1.0.dr	Static PE information: section name: .petite
Source: The Sims 3 crack.exe1.0.dr	Static PE information: section name:
Source: Serials.txt.exe3.0.dr	Static PE information: section name:
Source: Serials.txt.exe3.0.dr	Static PE information: section name: .petite
Source: Serials.txt.exe3.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe2.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe2.0.dr	Static PE information: section name: .petite
Source: Microsoft WinXP Crack.exe2.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe1.0.dr	Static PE information: section name:
Source: DivX 7.0 final.exe1.0.dr	Static PE information: section name: .petite
Source: DivX 7.0 final.exe1.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe0.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe0.0.dr	Static PE information: section name: .petite
Source: Lightwave SE Update.exe0.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe1.0.dr	Static PE information: section name:
Source: WinAmp 12 full.exe1.0.dr	Static PE information: section name: .petite
Source: WinAmp 12 full.exe1.0.dr	Static PE information: section name:
Source: Dark Angels.pif1.0.dr	Static PE information: section name:
Source: Dark Angels.pif1.0.dr	Static PE information: section name: .petite
Source: Dark Angels.pif1.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe2.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe2.0.dr	Static PE information: section name: .petite
Source: Adobe Premiere 9.exe2.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe1.0.dr	Static PE information: section name:
Source: Smashing the stack.rtf.exe1.0.dr	Static PE information: section name: .petite
Source: Smashing the stack.rtf.exe1.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif2.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif2.0.dr	Static PE information: section name: .petite
Source: Teen Porn 16.jpg.pif2.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe3.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe3.0.dr	Static PE information: section name: .petite
Source: Microsoft Office 2003 Crack.exe3.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe1.0.dr	Static PE information: section name:
Source: Ulead Keygen.exe1.0.dr	Static PE information: section name: .petite
Source: Ulead Keygen.exe1.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe1.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe1.0.dr	Static PE information: section name: .petite
Source: XXX hardcore pic.jpg.exe1.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe1.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe1.0.dr	Static PE information: section name: .petite
Source: Lightwave SE Update.exe1.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe1.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe1.0.dr	Static PE information: section name: .petite
Source: Adobe Photoshop 9 full.exe1.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe3.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe3.0.dr	Static PE information: section name: .petite
Source: Adobe Premiere 9.exe3.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif3.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif3.0.dr	Static PE information: section name: .petite
Source: Teen Porn 16.jpg.pif3.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe3.0.dr	Static PE information: section name:
Source: Microsoft WinXP Crack.exe3.0.dr	Static PE information: section name: .petite
Source: Microsoft WinXP Crack.exe3.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe2.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe2.0.dr	Static PE information: section name: .petite
Source: The Sims 3 crack.exe2.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe2.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe2.0.dr	Static PE information: section name: .petite
Source: Lightwave SE Update.exe2.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe2.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe2.0.dr	Static PE information: section name: .petite
Source: Adobe Photoshop 9 full.exe2.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif4.0.dr	Static PE information: section name:
Source: Teen Porn 16.jpg.pif4.0.dr	Static PE information: section name: .petite
Source: Teen Porn 16.jpg.pif4.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe2.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe2.0.dr	Static PE information: section name: .petite
Source: XXX hardcore pic.jpg.exe2.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe4.0.dr	Static PE information: section name:
Source: Adobe Premiere 9.exe4.0.dr	Static PE information: section name: .petite
Source: Adobe Premiere 9.exe4.0.dr	Static PE information: section name:
Source: Dark Angels.pif2.0.dr	Static PE information: section name:
Source: Dark Angels.pif2.0.dr	Static PE information: section name: .petite
Source: Dark Angels.pif2.0.dr	Static PE information: section name:
Source: Full album.mp3.pif3.0.dr	Static PE information: section name:
Source: Full album.mp3.pif3.0.dr	Static PE information: section name: .petite
Source: Full album.mp3.pif3.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe3.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe3.0.dr	Static PE information: section name: .petite
Source: Adobe Photoshop 9 full.exe3.0.dr	Static PE information: section name:
Source: Serials.txt.exe4.0.dr	Static PE information: section name:
Source: Serials.txt.exe4.0.dr	Static PE information: section name: .petite
Source: Serials.txt.exe4.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe4.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe4.0.dr	Static PE information: section name: .petite
Source: Microsoft Office 2003 Crack.exe4.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe3.0.dr	Static PE information: section name:
Source: Ahead Nero 7.exe3.0.dr	Static PE information: section name: .petite
Source: Ahead Nero 7.exe3.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe5.0.dr	Static PE information: section name:
Source: Microsoft Office 2003 Crack.exe5.0.dr	Static PE information: section name: .petite
Source: Microsoft Office 2003 Crack.exe5.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe3.0.dr	Static PE information: section name:
Source: XXX hardcore pic.jpg.exe3.0.dr	Static PE information: section name: .petite
Source: XXX hardcore pic.jpg.exe3.0.dr	Static PE information: section name:
Source: Dark Angels.pif3.0.dr	Static PE information: section name:
Source: Dark Angels.pif3.0.dr	Static PE information: section name: .petite
Source: Dark Angels.pif3.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe3.0.dr	Static PE information: section name:
Source: The Sims 3 crack.exe3.0.dr	Static PE information: section name: .petite
Source: The Sims 3 crack.exe3.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe1.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe1.0.dr	Static PE information: section name: .petite
Source: IE58.1 full setup.exe1.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe3.0.dr	Static PE information: section name:
Source: Lightwave SE Update.exe3.0.dr	Static PE information: section name: .petite
Source: Lightwave SE Update.exe3.0.dr	Static PE information: section name:
Source: Opera.exe2.0.dr	Static PE information: section name:
Source: Opera.exe2.0.dr	Static PE information: section name: .petite
Source: Opera.exe2.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe4.0.dr	Static PE information: section name:
Source: Adobe Photoshop 9 full.exe4.0.dr	Static PE information: section name: .petite
Source: Adobe Photoshop 9 full.exe4.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe2.0.dr	Static PE information: section name:
Source: IE58.1 full setup.exe2.0.dr	Static PE information: section name: .petite

Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_004037D0 push eax; ret		0_2_004037FE
Source: C:\Windows\winlogon.exe	Code function: 1_2_004037D0 push eax; ret		1_2_004037FE

Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366
Source: initial sample	Static PE information: section name: entropy: 7.930690770928366

Persistence and Installation Behavior

Drops PE files with a suspicious file extension

Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Full album.mp3.pif			Jump to dropped file

Drops executables to the windows directory (C:\Windows) and starts them

Source: unknown

Executable created and started: C:\Windows\winlogon.exe

Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Cracks & Warez Archive.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Cracks & Warez Archive.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Cracks & Warez Archive.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Windows\winlogon.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Cracks & Warez Archive.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Cracks & Warez Archive.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Cracks & Warez Archive.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-fr\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Cracks & Warez Archive.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Cracks & Warez Archive.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Cracks & Warez Archive.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\1000 Sex and more.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Ulead Keygen.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\ACDSee 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Learn Programming.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Adobe Photoshop 9 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Porno Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-fr\Lightwave SE Update.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Common Files\microsoft shared\ink\de-DE\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Gimp 1.5 Full with Key.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Visual Studio Net Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\MS Service Pack 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Doom 3 Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Magix Video Deluxe 4.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\3D Studio Max 3dsmax.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\RFC Basics Full Edition.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\The Sims 3 crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Windows Sourcecode.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Norton Antivirus 2004.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Dictionary English - France.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Serials.txt.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinAmp 12 full.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\WinXP eBook.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Adobe Premiere 9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\How to hack.doc.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Virii Sourcecode.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Ahead Nero 7.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Keygen 4 all appz.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Full album.mp3.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Star Office 8.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\E-Book Archive.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Clone DVD 5.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft Office 2003 Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Dark Angels.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Partitionsmagic 9.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\DivX 7.0 final.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\XXX hardcore pic.jpg.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Best Matrix Screensaver.scr			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Win Longhorn Beta.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\IE58.1 full setup.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Smashing the stack.rtf.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Cracks & Warez Archive.exe			Jump to dropped file

Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Teen Porn 16.jpg.pif			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Microsoft WinXP Crack.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Opera.exe			Jump to dropped file
Source: C:\Users\user\Desktop\webcam.txt.com.exe	File created: C:\ProgramData\USOShared\Adobe Premiere 9.exe			Jump to dropped file

Source: C:\Users\user\Desktop\webcam.txt.com.exe

File created: C:\Windows\winlogon.exe

Jump to dropped file

Source: C:\Users\user\Desktop\webcam.txt.com.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run ICQ Net			Jump to behavior
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run ICQ Net			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Source: initial sample

Icon embedded in binary file: icon matches a legit application icon: icon1548.png

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Windows\winlogon.exe

Evasive API call chain: CreateMutex,DecisionNodes,ExitProcess

Source: C:\Users\user\Desktop\webcam.txt.com.exe	Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)			graph_0-2655
Source: C:\Windows\winlogon.exe	Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)			graph_1-2722

Source: C:\Windows\winlogon.exe	Evasive API call chain: GetLocalTime,DecisionNodes			graph_1-2629
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Evasive API call chain: GetLocalTime,DecisionNodes			graph_0-2590

Source: C:\Windows\winlogon.exe

API coverage: 9.2 %

Source: C:\Users\user\Desktop\webcam.txt.com.exe TID: 6320

Thread sleep count: 141 > 30

Jump to behavior

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-0ah], 001ah and CTI: jne 004030EFh		0_2_00403085
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-0eh], 0002h and CTI: jne 004030EFh		0_2_00403085
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-10h], 07d4h and CTI: jne 004030EFh		0_2_00403085
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-08h], 0006h and CTI: je 004030CFh		0_2_00403085
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-08h], 0007h and CTI: je 004030CFh		0_2_00403085
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-08h], 0008h and CTI: jne 004030EFh		0_2_00403085
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-10h], 07dah and CTI: jbe 00401A0Eh		0_2_004019E8
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-0eh], 0001h and CTI: jc 00401A1Ch		0_2_004019E8
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-0eh], 000ch and CTI: jbe 00401A22h		0_2_004019E8
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-0ah], 0001h and CTI: jc 00401A30h		0_2_004019E8
Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-0ah], 001fh and CTI: jbe 00401A36h		0_2_004019E8
Source: C:\Windows\winlogon.exe	Code function: 1_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-10h], 07dah and CTI: jbe 00401A0Eh		1_2_004019E8
Source: C:\Windows\winlogon.exe	Code function: 1_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-0eh], 0001h and CTI: jc 00401A1Ch		1_2_004019E8
Source: C:\Windows\winlogon.exe	Code function: 1_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-0eh], 000ch and CTI: jbe 00401A22h		1_2_004019E8
Source: C:\Windows\winlogon.exe	Code function: 1_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-0ah], 0001h and CTI: jc 00401A30h		1_2_004019E8
Source: C:\Windows\winlogon.exe	Code function: 1_2_004019E8 GetSystemTime followed by cmp: cmp word ptr [ebp-0ah], 001fh and CTI: jbe 00401A36h		1_2_004019E8
Source: C:\Windows\winlogon.exe	Code function: 1_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-0ah], 001ah and CTI: jne 004030EFh		1_2_00403085
Source: C:\Windows\winlogon.exe	Code function: 1_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-0eh], 0002h and CTI: jne 004030EFh		1_2_00403085
Source: C:\Windows\winlogon.exe	Code function: 1_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-10h], 07d4h and CTI: jne 004030EFh		1_2_00403085
Source: C:\Windows\winlogon.exe	Code function: 1_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-08h], 0006h and CTI: je 004030CFh		1_2_00403085
Source: C:\Windows\winlogon.exe	Code function: 1_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-08h], 0007h and CTI: je 004030CFh		1_2_00403085
Source: C:\Windows\winlogon.exe	Code function: 1_2_00403085 GetLocalTime followed by cmp: cmp word ptr [ebp-08h], 0008h and CTI: jne 004030EFh		1_2_00403085

Source: C:\Users\user\Desktop\webcam.txt.com.exe	Code function: 0_2_00402CEA FindFirstFileA,CharLowerBuffA,FindNextFileA,FindClose,		0_2_00402CEA
Source: C:\Windows\winlogon.exe	Code function: 1_2_00402CEA FindFirstFileA,FindNextFileA,		1_2_00402CEA

Source: webcam.txt.com.exe, 00000000.00000003.2024854757.000000000052F000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000003.2024747006.0000000000522000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000003.2024802701.0000000000529000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000003.2024689790.0000000000519000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 2Qjnc,nj\/6hu_lneafi_nfledvm367ebfakq.js?bu=dx0ma3d6fxrucbibtqempqemuae&or=w'});;
Source: webcam.txt.com.exe, 00000000.00000002.4112381428.000000000049E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Code function: 0_2_004057EB LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Code function: 0_2_00401B67 GetLocalTime,GetTimeZoneInformation,wsprintfA,

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Code function: 0_2_00401B67 GetLocalTime,GetTimeZoneInformation,wsprintfA,

Source: C:\Users\user\Desktop\webcam.txt.com.exe

Code function: 0_2_00403B04 GetVersion,GetCommandLineA,GetModuleHandleA,

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	12 Native API	1 Registry Run Keys / Startup Folder	1 Process Injection	42 Masquerading	OS Credential Dumping	12 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Virtualization/Sandbox Evasion	LSASS Memory	11 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Ingress Tool Transfer	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	1 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	11 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Software Packing	LSA Secrets	3 System Information Discovery	SSH	Keylogging	Scheduled Transfer	Fallback Channels			Data Encrypted for Impact	Server	Gather Victim Network Information
Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 File Deletion	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Data Transfer Size Limits	Multiband Communication			Service Stop	Botnet	Domain Properties

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
webcam.txt.com.exe	95%	ReversingLabs	Win32.Worm.NetSky
webcam.txt.com.exe	93%	Virustotal		Browse
webcam.txt.com.exe	100%	Avira	WORM/Netsky.C
webcam.txt.com.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Ulead Keygen.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Cracks & Warez Archive.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Opera.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Photoshop 9 full.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Visual Studio Net Crack.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1000 Sex and more.rtf.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\The Sims 3 crack.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\DivX 7.0 final.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Premiere 9.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\IE58.1 full setup.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Smashing the stack.rtf.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\ACDSee 9.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Lightwave SE Update.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\3D Studio Max 3dsmax.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\WinAmp 12 full.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ahead Nero 7.exe	100%	Avira	WORM/Netsky.C
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Ulead Keygen.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Cracks & Warez Archive.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Opera.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Photoshop 9 full.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Visual Studio Net Crack.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1000 Sex and more.rtf.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\The Sims 3 crack.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\DivX 7.0 final.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Premiere 9.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\IE58.1 full setup.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Smashing the stack.rtf.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\ACDSee 9.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Lightwave SE Update.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\3D Studio Max 3dsmax.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\WinAmp 12 full.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ahead Nero 7.exe	100%	Joe Sandbox ML
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Cracks & Warez Archive.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\DivX 7.0 final.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\IE58.1 full setup.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Lightwave SE Update.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Opera.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Smashing the stack.rtf.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\The Sims 3 crack.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Ulead Keygen.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Visual Studio Net Crack.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\WinAmp 12 full.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1000 Sex and more.rtf.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\3D Studio Max 3dsmax.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\ACDSee 9.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Photoshop 9 full.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Premiere 9.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ahead Nero 7.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Best Matrix Screensaver.scr	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Clone DVD 5.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Cracks & Warez Archive.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dark Angels.pif	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dictionary English - France.doc.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\DivX 7.0 final.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Doom 3 Beta.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\E-Book Archive.rtf.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Full album.mp3.pif	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Gimp 1.5 Full with Key.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\How to hack.doc.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\IE58.1 full setup.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Keygen 4 all appz.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Learn Programming.doc.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Lightwave SE Update.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MS Service Pack 5.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Magix Video Deluxe 4.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft Office 2003 Crack.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft WinXP Crack.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Norton Antivirus 2004.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Photoshop 9 full.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Premiere 9.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Best Matrix Screensaver.scr	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Microsoft WinXP Crack.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Porno Screensaver.scr	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Teen Porn 16.jpg.pif	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Opera.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Partitionsmagic 9.0.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Porno Screensaver.scr	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\RFC Basics Full Edition.doc.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Screensaver.scr	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Serials.txt.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Smashing the stack.rtf.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Star Office 8.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Teen Porn 16.jpg.pif	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\The Sims 3 crack.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ulead Keygen.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Virii Sourcecode.scr	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Visual Studio Net Crack.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Win Longhorn Beta.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinAmp 12 full.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinXP eBook.doc.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Windows Sourcecode.doc.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\XXX hardcore pic.jpg.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Ahead Nero 7.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Doom 3 Beta.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\E-Book Archive.rtf.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\How to hack.doc.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Virii Sourcecode.scr	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\IE58.1 full setup.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Lightwave SE Update.exe	95%	ReversingLabs	Win32.Worm.NetSky
C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Smashing the stack.rtf.exe	95%	ReversingLabs	Win32.Worm.NetSky

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
mta6.am0.yahoodns.net	0%	Virustotal		Browse
mail.reg.ca	0%	Virustotal		Browse
onlineconnections.com.au	1%	Virustotal		Browse
mx01.earthlink-vadesecure.net	0%	Virustotal		Browse
gzip.org	0%	Virustotal		Browse
mx.cam.ac.uk	0%	Virustotal		Browse
cl.cam.ac.uk	0%	Virustotal		Browse
kinoho.net	0%	Virustotal		Browse
vision-media.ca	0%	Virustotal		Browse
luiscouto.pt	0%	Virustotal		Browse
src.dec.com	0%	Virustotal		Browse
sitnik.ru	0%	Virustotal		Browse
thejameskyle.com	0%	Virustotal		Browse
cryptsoft.com	0%	Virustotal		Browse
cloudhead.net	0%	Virustotal		Browse
theriver.com	1%	Virustotal		Browse
netcom.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://videoadssdk.azurewebsites.net/api/vpaid?code=ormoexb1ssje12klg/9jqrbzzm42xq/dp1abfowaq7tvzd4	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/jakearchibald/es6-promise/master/license	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
mta6.am0.yahoodns.net	67.195.204.73	true	true	0%, Virustotal, Browse	unknown
pb-mx22.pobox.com	173.228.157.41	true	false		high
onlineconnections.com.au	192.254.190.168	true	false	1%, Virustotal, Browse	unknown
ismtp.sitestar.everyone.net	64.29.151.236	true	false		high
mail.reg.ca	66.196.36.12	true	false	0%, Virustotal, Browse	unknown
outlook-com.olc.protection.outlook.com	52.101.73.10	true	false		high
mx01.earthlink-vadesecure.net	51.81.61.70	true	false	0%, Virustotal, Browse	unknown
mx01.mail.icloud.com	17.57.154.33	true	false		high
gzip.org	85.187.148.2	true	true	0%, Virustotal, Browse	unknown
gmail-smtp-in.l.google.com	172.253.115.27	true	false		high
alumni-caltech-edu.mail.protection.outlook.com	104.47.66.10	true	false		high
eforward1.registrar-servers.com	162.255.118.51	true	false		high
mxa-00377f01.gslb.pphosted.com	185.183.28.235	true	false		high
eggs.gnu.org	209.51.188.92	true	false		high
mx.cam.ac.uk	131.111.8.146	true	false	0%, Virustotal, Browse	unknown
aspmx.l.google.com	142.251.167.26	true	false		high
alumni.caltech.edu	unknown	unknown	false		high
8.8.29	unknown	unknown	true		unknown
8.110.4	unknown	unknown	true		unknown
cl.cam.ac.uk	unknown	unknown	true	0%, Virustotal, Browse	unknown
vision-media.ca	unknown	unknown	true	0%, Virustotal, Browse	unknown
4x.png	unknown	unknown	true		unknown
1.10.295	unknown	unknown	true		unknown
kinoho.net	unknown	unknown	true	0%, Virustotal, Browse	unknown
3.3.2	unknown	unknown	true		unknown
luiscouto.pt	unknown	unknown	true	0%, Virustotal, Browse	unknown
8.13.17	unknown	unknown	true		unknown
yahoo.com	unknown	unknown	false		high
0.11.10	unknown	unknown	true		unknown
8.2.42	unknown	unknown	true		unknown
src.dec.com	unknown	unknown	true	0%, Virustotal, Browse	unknown
7.22.5	unknown	unknown	true		unknown
sitnik.ru	unknown	unknown	true	0%, Virustotal, Browse	unknown
2.6.33	unknown	unknown	true		unknown
thejameskyle.com	unknown	unknown	true	0%, Virustotal, Browse	unknown
2.5.3	unknown	unknown	true		unknown
2.0.12	unknown	unknown	true		unknown
nongnu.org	unknown	unknown	false		high
pobox.com	unknown	unknown	false		high
cryptsoft.com	unknown	unknown	true	0%, Virustotal, Browse	unknown
3.1.74	unknown	unknown	true		unknown
1.1.49-custom.16	unknown	unknown	true		unknown
8.5.22	unknown	unknown	true		unknown
8.5.12	unknown	unknown	true		unknown
2x.png	unknown	unknown	true		unknown
cloudhead.net	unknown	unknown	true	0%, Virustotal, Browse	unknown
8.6.28	unknown	unknown	true		unknown
theriver.com	unknown	unknown	true	1%, Virustotal, Browse	unknown
netcom.com	unknown	unknown	true	0%, Virustotal, Browse	unknown
4.2.1	unknown	unknown	true		unknown
0.23.0	unknown	unknown	true		unknown
4.0.0	unknown	unknown	true		unknown
openoffice.org	unknown	unknown	false		high
3x.png	unknown	unknown	true		unknown
3.4.2	unknown	unknown	true		unknown
7.2.9	unknown	unknown	true		unknown
8.9.15	unknown	unknown	true		unknown
18.2.0	unknown	unknown	true		unknown
2.2.11	unknown	unknown	true		unknown
tootallnate.net	unknown	unknown	true		unknown
2.4.2	unknown	unknown	true		unknown
gmail.com	unknown	unknown	false		high
2.2.15	unknown	unknown	true		unknown
2.2.0	unknown	unknown	true		unknown
15.7.2	unknown	unknown	true		unknown
blakeembrey.com	unknown	unknown	true		unknown
1.0.5	unknown	unknown	true		unknown
outlook.com	unknown	unknown	false		high
bryson.demon.co.uk	unknown	unknown	true		unknown
mx2-lw-eu.apache.org	unknown	unknown	false		high
9.0.6	unknown	unknown	true		unknown
8.2.11	unknown	unknown	true		unknown
northcoast.com	unknown	unknown	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://spdx.org/licenses/mit.html)	webcam.txt.com.exe, 00000000.00000002.4114021770.0000000002F20000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoadssdk.azurewebsites.net/api/vpaid?code=ormoexb1ssje12klg/9jqrbzzm42xq/dp1abfowaq7tvzd4	webcam.txt.com.exe, 00000000.00000003.3133044573.0000000000545000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000003.3136511757.0000000000545000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000002.4112709818.0000000000545000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ads.msn.com/	webcam.txt.com.exe, 00000000.00000003.3133044573.0000000000545000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000003.3136511757.0000000000545000.00000004.00000020.00020000.00000000.sdmp, webcam.txt.com.exe, 00000000.00000002.4112709818.0000000000545000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.apache.org/licenses/	webcam.txt.com.exe, 00000000.00000003.1943099224.0000000002F21000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.office.com/article/92c234f1-dc91-4dc1-925d-6c90fc3816d8	webcam.txt.com.exe, 00000000.00000002.4112381428.0000000000500000.00000004.00000020.00020000.00000000.sdmp	false		high
https://raw.githubusercontent.com/jakearchibald/es6-promise/master/license	webcam.txt.com.exe, 00000000.00000002.4112381428.0000000000500000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
173.228.157.41	pb-mx22.pobox.com	United States		11403	NYINTERNETUS	false
209.51.188.92	eggs.gnu.org	United States		22989	FREEASINFREEDOMUS	false
52.101.73.10	outlook-com.olc.protection.outlook.com	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
66.196.36.12	mail.reg.ca	Canada		30158	ARIMA-NETWORKSCA	false
17.57.154.33	mx01.mail.icloud.com	United States		714	APPLE-ENGINEERINGUS	false
192.254.190.168	onlineconnections.com.au	United States		46606	UNIFIEDLAYER-AS-1US	false
162.255.118.51	eforward1.registrar-servers.com	United States		22612	NAMECHEAP-NETUS	false
104.47.66.10	alumni-caltech-edu.mail.protection.outlook.com	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
85.187.148.2	gzip.org	United States		55293	A2HOSTINGUS	true
142.251.16.27	unknown	United States		15169	GOOGLEUS	false
172.253.115.27	gmail-smtp-in.l.google.com	United States		15169	GOOGLEUS	false
185.183.28.235	mxa-00377f01.gslb.pphosted.com	Netherlands		52129	PROOFPOINT-ASN-EUGB	false
142.251.167.26	aspmx.l.google.com	United States		15169	GOOGLEUS	false
64.29.151.236	ismtp.sitestar.everyone.net	United States		30447	INFB2-ASUS	false
51.81.61.70	mx01.earthlink-vadesecure.net	United States		16276	OVHFR	false
67.195.204.73	mta6.am0.yahoodns.net	United States		26101	YAHOO-3US	true
131.111.8.146	mx.cam.ac.uk	United Kingdom		786	JANETJiscServicesLimitedGB	false

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1353116
Start date and time:	2023-12-04 12:55:49 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	webcam.txt.com.exe
Detection:	MAL
Classification:	mal100.spre.troj.evad.winEXE@2/1025@150/17
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 30 Number of non-executed functions: 24
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 17.32.222.242
Excluded domains from analysis (whitelisted): apple.com, ocsp.digicert.com, slscr.update.microsoft.com, mx-in.g.apple.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtQueryVolumeInformationFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
11:56:38	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run ICQ Net C:\Windows\winlogon.exe -stealth
12:57:18	API Interceptor	9140687x Sleep call for process: webcam.txt.com.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
173.228.157.41	Transcript.exe	Get hash	malicious	MyDoom	Browse
	lsass(1).exe	Get hash	malicious	MyDoom	Browse
	sample1.exe	Get hash	malicious	MyDoom	Browse
	sample1-unpacked.exe	Get hash	malicious	MyDoom	Browse
	sample1-unpacked.exe	Get hash	malicious	MyDoom	Browse
	sample1-unpacked.exe	Get hash	malicious	MyDoom	Browse
	sample1.exe	Get hash	malicious	MyDoom	Browse
	message.exe	Get hash	malicious		Browse
	15jihu.exe	Get hash	malicious		Browse
	3attachment.doc .exe	Get hash	malicious		Browse
	3message.exe	Get hash	malicious		Browse
	41mai.exe	Get hash	malicious		Browse
	46tex.exe	Get hash	malicious		Browse
	8document.exe	Get hash	malicious		Browse
	9file.exe	Get hash	malicious		Browse
	.exe	Get hash	malicious		Browse
	15text.exe	Get hash	malicious		Browse
	21.txt .exe	Get hash	malicious		Browse
	43messag.exe	Get hash	malicious		Browse
	19documen.exe	Get hash	malicious		Browse
209.51.188.92	.exe	Get hash	malicious	Unknown	Browse
	.exe	Get hash	malicious	Unknown	Browse
	ydbWyoxHsd.exe	Get hash	malicious	Unknown	Browse
	Readme.exe	Get hash	malicious	Unknown	Browse
	document_excel.exe	Get hash	malicious	Unknown	Browse
	data.exe	Get hash	malicious	Unknown	Browse
	document.txt .exe	Get hash	malicious	Unknown	Browse
	ivMI3veipP.exe	Get hash	malicious	Unknown	Browse
	3posting_old_photos.exe	Get hash	malicious	Unknown	Browse
	49trash_secrets.doc.exe	Get hash	malicious	Unknown	Browse
	40injection.exe	Get hash	malicious	Unknown	Browse
	17warez_moonlight.exe	Get hash	malicious	Unknown	Browse
	50story_description.exe	Get hash	malicious	Unknown	Browse
	3pic.doc.exe	Get hash	malicious	Unknown	Browse
	1friend.exe	Get hash	malicious	Unknown	Browse
	9webcam_unfolds.rtf.exe	Get hash	malicious	Unknown	Browse
	1violence_nothing.exe	Get hash	malicious	Unknown	Browse
	33stuff.rtf.exe	Get hash	malicious	Unknown	Browse
	5trash_454543403.exe	Get hash	malicious	Unknown	Browse
	22nothing.htm.exe	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
pb-mx22.pobox.com	Transcript.exe	Get hash	malicious	MyDoom	Browse	173.228.157.41
	file.log.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	data.log.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	message.txt.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	test.dat.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	Update-KB7390-x86.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	Update-KB6734-x86.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	Update-KB5058-x86.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	file.txt.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	Update-KB250-x86.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	Update-KB2984-x86.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	doc.msg.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	test.msg.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	Update-KB3756-x86.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	body.elm.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	readme.txt.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	Update-KB9504-x86.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	Update-KB6340-x86.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	file.msg.exe	Get hash	malicious	Unknown	Browse	173.228.157.41
	lsass(1).exe	Get hash	malicious	MyDoom	Browse	173.228.157.41
mta6.am0.yahoodns.net	file.exe	Get hash	malicious	Tofsee	Browse	98.136.96.74
	file.msg.scr.exe	Get hash	malicious	Unknown	Browse	67.195.228.106
	file.exe	Get hash	malicious	Tofsee	Browse	67.195.228.94
	.exe	Get hash	malicious	Unknown	Browse	98.136.96.91
	file.exe	Get hash	malicious	Tofsee	Browse	98.136.96.76
	file.log.exe	Get hash	malicious	Unknown	Browse	67.195.228.94
	data.log.exe	Get hash	malicious	Unknown	Browse	67.195.228.109
	message.elm.exe	Get hash	malicious	Unknown	Browse	67.195.204.79
	message.txt.exe	Get hash	malicious	Unknown	Browse	98.136.96.77
	test.dat.exe	Get hash	malicious	Unknown	Browse	98.136.96.77
	Update-KB7390-x86.exe	Get hash	malicious	Unknown	Browse	67.195.228.110
	Update-KB6734-x86.exe	Get hash	malicious	Unknown	Browse	67.195.228.111
	Update-KB5058-x86.exe	Get hash	malicious	Unknown	Browse	98.136.96.77
	Update-KB78-x86.exe	Get hash	malicious	Unknown	Browse	98.136.96.77
	file.txt.exe	Get hash	malicious	Unknown	Browse	67.195.204.72
	Update-KB250-x86.exe	Get hash	malicious	Unknown	Browse	98.136.96.74
	Update-KB2984-x86.exe	Get hash	malicious	Unknown	Browse	67.195.204.79
	doc.msg.exe	Get hash	malicious	Unknown	Browse	67.195.228.94
	3hTS09wZ7G.exe	Get hash	malicious	Raccoon RedLine SmokeLoader Tofsee	Browse	67.195.228.110
	DUpgpAnHkq.exe	Get hash	malicious	Raccoon RedLine SmokeLoader Tofsee	Browse	67.195.204.73

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NYINTERNETUS	Transcript.exe	Get hash	malicious	MyDoom	Browse	64.147.108.55
	kRheyrmAko.elf	Get hash	malicious	Mirai	Browse	66.111.5.62
	86fWog7Qh0.elf	Get hash	malicious	Mirai	Browse	64.147.98.84
	8vlzmXygG4.elf	Get hash	malicious	Mirai	Browse	66.111.5.72
	Fantazy.arm7.elf	Get hash	malicious	Mirai	Browse	66.111.6.164
	27G1PCeLc8.elf	Get hash	malicious	Mirai	Browse	64.147.98.10
	KMqGoudziq.elf	Get hash	malicious	Unknown	Browse	63.165.249.188
	rUlulRRDHK.elf	Get hash	malicious	Mirai	Browse	66.111.5.99
	6gjnnBAbpc.exe	Get hash	malicious	Pushdo	Browse	66.111.4.72
	iJzpyjAehB.exe	Get hash	malicious	Pushdo	Browse	66.111.4.75
	EksRd2mRLH.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	66.111.4.75
	rLDmqbpt5D.exe	Get hash	malicious	Pushdo, DanaBot, RedLine, SmokeLoader	Browse	66.111.4.75
	.exe	Get hash	malicious	Unknown	Browse	64.147.108.52
	d4bNCWDk1F.exe	Get hash	malicious	Pushdo	Browse	66.111.4.75
	.exe	Get hash	malicious	Unknown	Browse	64.147.108.51
	jAqT1F0Fpy.exe	Get hash	malicious	Pony	Browse	66.111.4.54
	MYorfmVq9Z.exe	Get hash	malicious	Pushdo	Browse	66.111.4.75
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	66.111.4.73
	nwk9iV8lpS.exe	Get hash	malicious	Unknown	Browse	66.111.4.72
	3ts2As2Bkm.exe	Get hash	malicious	Unknown	Browse	66.111.4.72
FREEASINFREEDOMUS	http://www.redmine.org	Get hash	malicious	HTMLPhisher	Browse	209.51.188.116
	.exe	Get hash	malicious	Unknown	Browse	209.51.188.92
	.exe	Get hash	malicious	Unknown	Browse	209.51.188.92
	ydbWyoxHsd.exe	Get hash	malicious	Unknown	Browse	209.51.188.92
	Readme.exe	Get hash	malicious	Unknown	Browse	209.51.188.92
	document_excel.exe	Get hash	malicious	Unknown	Browse	209.51.188.92
	data.exe	Get hash	malicious	Unknown	Browse	209.51.188.92
	document.txt .exe	Get hash	malicious	Unknown	Browse	209.51.188.92
	ivMI3veipP.exe	Get hash	malicious	Unknown	Browse	209.51.188.92
	FSvvTtQaTe.exe	Get hash	malicious	Gozi Ursnif	Browse	209.51.188.148
	mIHAt2J1jc.exe	Get hash	malicious	Gozi Ursnif	Browse	209.51.188.148
	Daine_tax_returns.doc	Get hash	malicious	NetWire	Browse	209.51.188.148
	Daine_tax_returns.doc	Get hash	malicious	Unknown	Browse	209.51.188.148

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Reputation:	low
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Reputation:	low
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Reputation:	low
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Reputation:	low
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\Filter\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000120\_office_iss_excel_shared_ux\UserActivityUX\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-fr\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-fr\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-fr\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\he-il\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-si\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\ACDSee 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\ACDSee 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Adobe Photoshop 9 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Adobe Photoshop 9 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Best Matrix Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Best Matrix Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Clone DVD 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Clone DVD 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Cracks & Warez Archive.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Cracks & Warez Archive.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Dark Angels.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Dark Angels.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\DivX 7.0 final.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\DivX 7.0 final.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Gimp 1.5 Full with Key.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\IE58.1 full setup.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\IE58.1 full setup.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Lightwave SE Update.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Lightwave SE Update.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\MS Service Pack 5.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\MS Service Pack 5.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Magix Video Deluxe 4.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Magix Video Deluxe 4.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Partitionsmagic 9.0.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Partitionsmagic 9.0.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Porno Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Porno Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Smashing the stack.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Smashing the stack.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Star Office 8.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Star Office 8.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\The Sims 3 crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\The Sims 3 crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Ulead Keygen.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Ulead Keygen.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Visual Studio Net Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Visual Studio Net Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\WinAmp 12 full.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\WinAmp 12 full.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\XXX hardcore pic.jpg.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sl-sl\XXX hardcore pic.jpg.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Adobe\Acrobat DC\Acrobat\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sv-se\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\1000 Sex and more.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\1000 Sex and more.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\3D Studio Max 3dsmax.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\3D Studio Max 3dsmax.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Ahead Nero 7.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Ahead Nero 7.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Dictionary English - France.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Dictionary English - France.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Doom 3 Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Doom 3 Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\E-Book Archive.rtf.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\E-Book Archive.rtf.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Full album.mp3.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Full album.mp3.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Gimp 1.5 Full with Key.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\How to hack.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\How to hack.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Keygen 4 all appz.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Keygen 4 all appz.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Learn Programming.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Learn Programming.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Microsoft Office 2003 Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Microsoft Office 2003 Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Norton Antivirus 2004.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Norton Antivirus 2004.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\RFC Basics Full Edition.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\RFC Basics Full Edition.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Screensaver.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Screensaver.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Serials.txt.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Serials.txt.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Virii Sourcecode.scr

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Virii Sourcecode.scr:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Win Longhorn Beta.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Win Longhorn Beta.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\WinXP eBook.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\WinXP eBook.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Windows Sourcecode.doc.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files\Common Files\microsoft shared\ink\de-DE\Windows Sourcecode.doc.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\ProgramData\USOShared\Adobe Premiere 9.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\USOShared\Adobe Premiere 9.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\ProgramData\USOShared\Microsoft WinXP Crack.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\USOShared\Microsoft WinXP Crack.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\ProgramData\USOShared\Opera.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\USOShared\Opera.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\ProgramData\USOShared\Teen Porn 16.jpg.pif

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\USOShared\Teen Porn 16.jpg.pif:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\privacy_tear.zip

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	25483
Entropy (8bit):	7.6706527551267945
Encrypted:	false
SSDEEP:	768:rkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+G:8QWN7y3QLPfg9R0F3+G
MD5:	C781A4CDC85AB3D4665CDF2AC6095C2B
SHA1:	452BD8747026E2642DEA8B336C21DB55C9BD5F48
SHA-256:	EBDD407C707FE3525903FAFA551616038A6FD9A91677B1456237D72B53E829F7
SHA-512:	760118F20005835EC94EAA60F4AD2884CF6AB73C6E364AB9B93EB316B797C0974381B2F3B5D2D4F2218103D4903F30750CBF1EE0817D82C79A111009D0A88554
Malicious:	false
Preview:	PK...........1bd...c...c......privacy_tear.pifMZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`.....................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\winlogon.exe

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Category:	dropped
Size (bytes):	25353
Entropy (8bit):	7.6779311440910325
Encrypted:	false
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
MD5:	0E17DBEC1904B7C10614BFB29EF758FD
SHA1:	B19765F00D764E9FEAE654C9223D124B1A874361
SHA-256:	B9B8E6D43CE8770733B490D6B98C61F84AE5D5D9E170ADA6F034128D0BA9085F
SHA-512:	6DD92CF0D1D828880F1ED476F64FA746C6DCC2E9CBCAF369182BF5E4E096068458402D3E3D080F97CE6AE4762A2219443FC43730CB0E207E5EC14A3BE27B6A34
Malicious:	true
Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L....;@.................P..........B........`....@..................................................................................................................................................................................................................V..................`....petite..............^..............@..@....................................`...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\winlogon.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\webcam.txt.com.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
Entropy (8bit):	7.6779311440910325
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	webcam.txt.com.exe
File size:	25'353 bytes
MD5:	0e17dbec1904b7c10614bfb29ef758fd
SHA1:	b19765f00d764e9feae654c9223d124b1a874361
SHA256:	b9b8e6d43ce8770733b490d6b98c61f84ae5d5d9e170ada6f034128d0ba9085f
SHA512:	6dd92cf0d1d828880f1ed476f64fa746c6dcc2e9cbcaf369182bf5e4e096068458402d3e3d080f97ce6ae4762a2219443fc43730cb0e207e5ec14a3be27b6a34
SSDEEP:	768:MkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+V:HQWN7y3QLPfg9R0F3+V
TLSH:	51B2D0A9F5CFB9A5CD2D6373003A048CAB751E061EBA0FEF18957E9A28381C94C2503D
File Content Preview:	MZ......................@.......................................k"_V/C1./C1./C1.._?.#C1..\;.4C1./C0.pC1..Kl."C1..\:.*C1..E7..C1.Rich/C1.........Compressed by Petite (c)1999 Ian Luck...PE..L.....;@.................P..........B........`....@................

File Icon


Icon Hash:	c3d391918fa3e9c8

Static PE Info

General

Entrypoint:	0x41a042
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:
Time Stamp:	0x403BA7EC [Tue Feb 24 19:37:16 2004 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	413a406840de138bccb9a1afd8315434

Entrypoint Preview

Instruction
mov eax, 0041A000h
push 0040708Bh
push dword ptr fs:[00000000h]
mov dword ptr fs:[00000000h], esp
pushf
pushad
push eax
push 00400000h
mov edi, dword ptr [esp]
mov esi, dword ptr [eax]
add di, 0780h
lea esi, dword ptr [esi+eax+08h]
mov dword ptr [eax], edi
mov ebx, dword ptr [esi+10h]
push eax
push esi
push 00000002h
push 00000880h
push edi
push 00000013h
push 00000006h
push esi
push 00000004h
push 00000880h
push edi
call ebx
sub esi, 08h
pop ecx
rep movsd
pop ecx
add di, 0068h
add esi, 000000C2h
rep movsd
call ebx
pop eax
lea edx, dword ptr [eax+000001B8h]
mov ecx, dword ptr [edx]
btr ecx, 1Fh
jnc 00007F4CBC833718h
mov eax, dword ptr [esp]
std
mov esi, eax
mov edi, eax
add esi, dword ptr [edx+04h]
add edi, dword ptr [edx+08h]
rep movsd
add edx, 0Ch
cld
jmp 00007F4CBC8336E4h
add edx, 10h
mov ebx, dword ptr [edx-0Ch]
test ebx, ebx
je 00007F4CBC8336DAh
mov eax, dword ptr [esp]
mov edi, dword ptr [edx-08h]
add edi, eax
push edx
lea esi, dword ptr [ecx+eax]
jmp 00007F4CBC833719h
pop eax
pop eax
pop eax
pop edx
je 00007F4CBC8336C6h
jmp 00007F4CBC833621h
add dl, dl
jne 00007F4CBC833709h
mov dl, byte ptr [esi]
sub esi, FFFFFFFFh
adc dl, dl
ret
cmp ebx, 00010000h
jnc 00007F4CBC833710h
push FFFFC060h
push FFFFFC60h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1a1fc	0x1af
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x19000	0x508	.petite
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x18000	0x5600	False	0.9855105377906976	data	7.930690770928366	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.petite	0x19000	0x1000	0x508	False	0.3144409937888199	data	3.7828471556838457	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x1a000	0x3ab	0x400	False	0.69921875	data	5.380392509344554	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x190d0	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	German	Germany	0.2956989247311828
RT_ICON	0x193b8	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	German	Germany	0.40202702702702703
RT_GROUP_ICON	0x194e0	0x22	data	German	Germany	1.0

Imports

DLL	Import
USER32.dll	MessageBoxA, wsprintfA
KERNEL32.dll	ExitProcess, LoadLibraryA, GetProcAddress, VirtualProtect
WININET.dll	InternetGetConnectedState
WS2_32.dll	inet_addr
iphlpapi.dll	GetNetworkParams
ADVAPI32.dll	RegOpenKeyA

Possible Origin

Language of compilation system	Country where language is spoken	Map
German	Germany

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.4172.253.115.2749738252810644 12/04/23-12:57:10.044750	TCP	2810644	ETPRO TROJAN Worm.Mydoom spreading via SMTP 28	49738	25	192.168.2.4	172.253.115.27
192.168.2.4172.253.115.2749739252810641 12/04/23-12:57:10.143329	TCP	2810641	ETPRO TROJAN Worm.Mydoom spreading via SMTP 25	49739	25	192.168.2.4	172.253.115.27
192.168.2.485.187.148.249748252810645 12/04/23-12:59:08.468348	TCP	2810645	ETPRO TROJAN Worm.Mydoom spreading via SMTP 29	49748	25	192.168.2.4	85.187.148.2
192.168.2.4142.251.16.2749758252810641 12/04/23-12:59:56.847271	TCP	2810641	ETPRO TROJAN Worm.Mydoom spreading via SMTP 25	49758	25	192.168.2.4	142.251.16.27
192.168.2.4142.251.16.2749767252810645 12/04/23-13:00:15.447869	TCP	2810645	ETPRO TROJAN Worm.Mydoom spreading via SMTP 29	49767	25	192.168.2.4	142.251.16.27
192.168.2.4172.253.115.2749736252810646 12/04/23-12:57:10.151702	TCP	2810646	ETPRO TROJAN Worm.Mydoom spreading via SMTP 30	49736	25	192.168.2.4	172.253.115.27
192.168.2.4142.251.16.2749759252806859 12/04/23-12:59:56.770680	TCP	2806859	ETPRO TROJAN Worm.Win32/Netsky.P@mm spreading via SMTP 1	49759	25	192.168.2.4	142.251.16.27
192.168.2.4185.183.28.23549744252810641 12/04/23-12:58:05.193819	TCP	2810641	ETPRO TROJAN Worm.Mydoom spreading via SMTP 25	49744	25	192.168.2.4	185.183.28.235
192.168.2.4142.251.167.2649763252810643 12/04/23-13:00:06.727890	TCP	2810643	ETPRO TROJAN Worm.Mydoom spreading via SMTP 27	49763	25	192.168.2.4	142.251.167.26
192.168.2.4142.251.16.2749768252810644 12/04/23-13:00:15.434600	TCP	2810644	ETPRO TROJAN Worm.Mydoom spreading via SMTP 28	49768	25	192.168.2.4	142.251.16.27
192.168.2.467.195.204.7349729252810646 12/04/23-12:56:39.672732	TCP	2810646	ETPRO TROJAN Worm.Mydoom spreading via SMTP 30	49729	25	192.168.2.4	67.195.204.73

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2023 12:56:38.833709955 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:38.943500996 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:38.943613052 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.175481081 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.176533937 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.286206007 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.286237955 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.288876057 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.399158955 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.401060104 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.511563063 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.512382984 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.622129917 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.632194996 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.672732115 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.735950947 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.782159090 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.782423019 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.782474041 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.842411995 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.846038103 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.846682072 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.892178059 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.892982960 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.952105045 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.953135967 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:39.963812113 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:39.964051008 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.002749920 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.003458023 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.063623905 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.064536095 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.073892117 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.074059010 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.113154888 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.113790035 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.174200058 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.175009966 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.183721066 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.183917999 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.223534107 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.224186897 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.280219078 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.284826994 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.285348892 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.293649912 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.293864965 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.333774090 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.334435940 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.390140057 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.391062021 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.395299911 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.395486116 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.403547049 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.403779984 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.444291115 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.444888115 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.500569105 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.501164913 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.505084038 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.513955116 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.554704905 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.555111885 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.611028910 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.611542940 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.664623976 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.665050030 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.721235037 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.721709013 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.774637938 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.775090933 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.831301928 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.832009077 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.884737015 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.885323048 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.942347050 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.943157911 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:40.995989084 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:40.996587038 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.052815914 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.053473949 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.106256962 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.106914043 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.164062977 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.164989948 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.216492891 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.217109919 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.274772882 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.275427103 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.327020884 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.327683926 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.385009050 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.385731936 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.437407970 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.437994957 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.489701033 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.495373964 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.496011972 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.547631025 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.548441887 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.598632097 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.599337101 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.599993944 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.605528116 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.605679989 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.657497883 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.658198118 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.658711910 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.708525896 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.709460020 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.709760904 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.715430975 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.767359018 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.768333912 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:41.770221949 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.819313049 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:41.878148079 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:42.095674038 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:42.097599030 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:56:42.207984924 CET	25	49729	67.195.204.73	192.168.2.4
Dec 4, 2023 12:56:42.208076954 CET	49729	25	192.168.2.4	67.195.204.73
Dec 4, 2023 12:57:09.045737028 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.047595978 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.068680048 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.146452904 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.146541119 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.148972988 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.149050951 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.154993057 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.175930977 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.176013947 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.257359028 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.257536888 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.403122902 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.403768063 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.403778076 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.404798031 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.409427881 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.419950962 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.422151089 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.423943996 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.516428947 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.529768944 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.532470942 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.533162117 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.534482002 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.536796093 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.537074089 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.539388895 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.540133953 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.542522907 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.542678118 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.545432091 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.639663935 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.641387939 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.642986059 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.646862030 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.649872065 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.651273012 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.651331902 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.652561903 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.653894901 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.657655954 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.660744905 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.662106991 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.752290010 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.758523941 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.761292934 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.775948048 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.787641048 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.788943052 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.835818052 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.837755919 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.889794111 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.891865969 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.894953012 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.897653103 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.902781010 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.904200077 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.925029993 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.938929081 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.947329998 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.992743015 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:09.993170977 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:09.999114037 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.000849009 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.010843992 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.019728899 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.024491072 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.026129961 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.032809973 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.036010027 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.044749975 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.059597015 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.061610937 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.086412907 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.097965002 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.098586082 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.125574112 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.128675938 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.131398916 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.131881952 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.136765003 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.140007973 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.143328905 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.145510912 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.148550034 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.151701927 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.167352915 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.168035030 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.199892998 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.201601982 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.202126980 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.202135086 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.234417915 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.236248016 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.237102985 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.238950968 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.246592999 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.247757912 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.254246950 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.255362034 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.256280899 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.256306887 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.258682013 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.259505033 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.272749901 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.274352074 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.309807062 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.312207937 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.312422991 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.316638947 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.340756893 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.342566967 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.343600035 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.353533030 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.359404087 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.362243891 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.363970041 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.377681017 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.416599035 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.424806118 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.446439981 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.446454048 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.446459055 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.449630976 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.451631069 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.550317049 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.550333023 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.550766945 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.551161051 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.555433989 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.555442095 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.555944920 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.556142092 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.653292894 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.654366970 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.654704094 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.656079054 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.657428026 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.658567905 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.662872076 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.664339066 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.756032944 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.756747961 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.757961035 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.759139061 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.759145975 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.760742903 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.770781040 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.771869898 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.859277010 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.860765934 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.863163948 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.877808094 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.897964954 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.898000002 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.898004055 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.898047924 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.998435020 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.998578072 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.998847961 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.999397993 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:10.999774933 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:10.999778986 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.005678892 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.006114006 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.104830027 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.105770111 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.106152058 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.106240988 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.108205080 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.108669996 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.113318920 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.114782095 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.198849916 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.199176073 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.199503899 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.209424019 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.210266113 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.213062048 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.213931084 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.215217113 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.215904951 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.224893093 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.239825010 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.303436995 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.303445101 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.303457022 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.305624962 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.305944920 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.307322025 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.313375950 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.313611984 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.318924904 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.318944931 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.319271088 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.319307089 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.347660065 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.349315882 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.407376051 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.407828093 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.408655882 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.409354925 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.410367966 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.411233902 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.419424057 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.424004078 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.424202919 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.458029985 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.459287882 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.514004946 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.514022112 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.514036894 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.565248013 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.600754023 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.607062101 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.607084036 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.607228041 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.710717916 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.710736036 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.710757971 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.710858107 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.710900068 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.710903883 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.711977959 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.712542057 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.814080954 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.814198017 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.814255953 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.814321995 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.814469099 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.814532042 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.816766024 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.816943884 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.917592049 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.918016911 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.918256998 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.918438911 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.918502092 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.918778896 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:11.927022934 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:11.927867889 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.018321037 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.019979000 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.024691105 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.034657001 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.059290886 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.059299946 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.059320927 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.059387922 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.160073996 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.160080910 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.160489082 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.160733938 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.161148071 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.161463976 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.166727066 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.167061090 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.260812044 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.261841059 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.262087107 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.262936115 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.263118982 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.264229059 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.272819996 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.273966074 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.363369942 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.363384008 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.364473104 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.364785910 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.365490913 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.366579056 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.380414009 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.381540060 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.464709044 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.465684891 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.466037989 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.467108965 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.467207909 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.468470097 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.487415075 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.488852978 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.572211981 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.573046923 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.573493958 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.573980093 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.574620962 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.575892925 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.600066900 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.601485968 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.674355984 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.675637007 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.676759005 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.677925110 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.679999113 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.681209087 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.707623959 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.708973885 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.777246952 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.778537035 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.780276060 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.781630039 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.783978939 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.785655975 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.816406012 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.817814112 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.883085012 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.884524107 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.884708881 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.886065006 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.888237953 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.889657974 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.926369905 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.927983046 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.984672070 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.986013889 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.986454964 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.987797022 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:12.990231037 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:12.991575956 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.036812067 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.039020061 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.086808920 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.088294029 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.088610888 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.090167046 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.092971087 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.094547987 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.144855022 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.146374941 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.188679934 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.189941883 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.190722942 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.191956043 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.195205927 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.196533918 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.252778053 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.254177094 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.290322065 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.291347980 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.292787075 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.293867111 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.297508001 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.298543930 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.359988928 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.361231089 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.394393921 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.395386934 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.395967960 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.396971941 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.400751114 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.401791096 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.469533920 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.470619917 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.499727964 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.500624895 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.500977993 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.502208948 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.504741907 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.506104946 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.576762915 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.578705072 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.607650042 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.607660055 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.607966900 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.609330893 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.609724998 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.610655069 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.684789896 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.685997009 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.711975098 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.711985111 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.712760925 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.713943005 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.715372086 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.715945005 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.792061090 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.793581963 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.816063881 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.817281961 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.817713976 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.818371058 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.818963051 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.820096016 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.900039911 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.901371956 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.919838905 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.919851065 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.922024965 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.922151089 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:13.923976898 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:13.925724983 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.008068085 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.009116888 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.022696018 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.022711039 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.025279045 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.025502920 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.026850939 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.027622938 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.116957903 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.118021011 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.125766993 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.126765966 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.127650976 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.128505945 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.131973982 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.131975889 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.224944115 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.226005077 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.227021933 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.228013039 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.232688904 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.232906103 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.233766079 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.234776974 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.328571081 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.329557896 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.332741022 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.333692074 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.334167004 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.335349083 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.335949898 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.336425066 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.430411100 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.431407928 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.437558889 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.437887907 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.439454079 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.439526081 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.439954042 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.440545082 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.531754971 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.532963037 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.540132999 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.540209055 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.541251898 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.542471886 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.546286106 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.547569036 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.634011030 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.635111094 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.642035961 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.642803907 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.643186092 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.644604921 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.653506994 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.654803991 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.735419035 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.736505032 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.744633913 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.745243073 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.745829105 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.747090101 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.760617018 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.761965036 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.836807966 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.837882042 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.846471071 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.847414017 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.847608089 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.848748922 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.869379997 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.870526075 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.938057899 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.939193010 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.949413061 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.949479103 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.950555086 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.951953888 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:14.976428032 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:14.977694988 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.039937973 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.041075945 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.051109076 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.052134037 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.052268028 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.054203987 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.084207058 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.085450888 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.147685051 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.148756027 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.156555891 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.157536983 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.157934904 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.158937931 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.184851885 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.193084002 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.193926096 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.249248981 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.250227928 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.258307934 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.259424925 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.269893885 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.269905090 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.269970894 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.270226002 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.270282984 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.270324945 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.289578915 CET	49737	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.289670944 CET	49738	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.290692091 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.292695999 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.302669048 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.354489088 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.365370035 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.365827084 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.365922928 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.370672941 CET	49736	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.394906998 CET	25	49737	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.399832010 CET	25	49738	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.401683092 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.411165953 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.411276102 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.411339045 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.419604063 CET	49739	25	192.168.2.4	172.253.115.27
Dec 4, 2023 12:57:15.478935957 CET	25	49736	172.253.115.27	192.168.2.4
Dec 4, 2023 12:57:15.523364067 CET	25	49739	172.253.115.27	192.168.2.4
Dec 4, 2023 12:58:03.692598104 CET	49742	25	192.168.2.4	173.228.157.41
Dec 4, 2023 12:58:03.719468117 CET	49743	25	192.168.2.4	51.81.61.70
Dec 4, 2023 12:58:03.814728975 CET	25	49743	51.81.61.70	192.168.2.4
Dec 4, 2023 12:58:03.815651894 CET	49743	25	192.168.2.4	51.81.61.70
Dec 4, 2023 12:58:03.856933117 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:03.858464956 CET	49742	25	192.168.2.4	173.228.157.41
Dec 4, 2023 12:58:03.914390087 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:04.094058037 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:04.094161034 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:04.390794992 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:04.392258883 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:04.466562033 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:04.468023062 CET	49742	25	192.168.2.4	173.228.157.41
Dec 4, 2023 12:58:04.571590900 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:04.577033997 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:04.580765963 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:04.632247925 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:04.632286072 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:04.634677887 CET	49742	25	192.168.2.4	173.228.157.41
Dec 4, 2023 12:58:04.714026928 CET	49745	25	192.168.2.4	192.254.190.168
Dec 4, 2023 12:58:04.769037962 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:04.769509077 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:04.798842907 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:04.799767971 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:04.800110102 CET	49742	25	192.168.2.4	173.228.157.41
Dec 4, 2023 12:58:04.894339085 CET	25	49745	192.254.190.168	192.168.2.4
Dec 4, 2023 12:58:04.895086050 CET	49745	25	192.168.2.4	192.254.190.168
Dec 4, 2023 12:58:04.962094069 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:04.963985920 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.066966057 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:05.160917044 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.172626972 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.193819046 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.212249041 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:05.214977980 CET	49742	25	192.168.2.4	173.228.157.41
Dec 4, 2023 12:58:05.240848064 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.247023106 CET	25	49743	51.81.61.70	192.168.2.4
Dec 4, 2023 12:58:05.247062922 CET	25	49743	51.81.61.70	192.168.2.4
Dec 4, 2023 12:58:05.247163057 CET	49743	25	192.168.2.4	51.81.61.70
Dec 4, 2023 12:58:05.271043062 CET	49743	25	192.168.2.4	51.81.61.70
Dec 4, 2023 12:58:05.305327892 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.332276106 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.358088970 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.366336107 CET	25	49743	51.81.61.70	192.168.2.4
Dec 4, 2023 12:58:05.373131990 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.373984098 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.379142046 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:05.379467964 CET	25	49742	173.228.157.41	192.168.2.4
Dec 4, 2023 12:58:05.379822969 CET	49742	25	192.168.2.4	173.228.157.41
Dec 4, 2023 12:58:05.416732073 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.444890022 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.460665941 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.463922024 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.484873056 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.485845089 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.511771917 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.513101101 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.537760019 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.538883924 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.553442001 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.556783915 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.596770048 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.598231077 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.624355078 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.625487089 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.643593073 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.644349098 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.665468931 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.666049004 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.692627907 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.693552017 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.719250917 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.720309973 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.736218929 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.736756086 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.762249947 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.778451920 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.779206991 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.805450916 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.806624889 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.823877096 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.824613094 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.845588923 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.846492052 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.873203993 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.874217987 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.899822950 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.900921106 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.917478085 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.918207884 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.941900969 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.943034887 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.958760023 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.959284067 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:05.986063957 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:05.986932039 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.004144907 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.005029917 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.025930882 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.026804924 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.053766012 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.054795027 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.080405951 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.081089973 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.097950935 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.098562002 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.122385979 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.123214960 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.138875008 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.166315079 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.184371948 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.206115007 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.234278917 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.260550976 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.277823925 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.302592993 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.302701950 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.303958893 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.304224968 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.483354092 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.483412981 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:06.483424902 CET	25	49744	185.183.28.235	192.168.2.4
Dec 4, 2023 12:58:06.483469009 CET	49744	25	192.168.2.4	185.183.28.235
Dec 4, 2023 12:58:07.483808041 CET	49746	25	192.168.2.4	131.111.8.146
Dec 4, 2023 12:58:07.658689976 CET	49747	25	192.168.2.4	64.29.151.236
Dec 4, 2023 12:58:07.659408092 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:07.659483910 CET	49746	25	192.168.2.4	131.111.8.146
Dec 4, 2023 12:58:07.781513929 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:07.781615019 CET	49747	25	192.168.2.4	64.29.151.236
Dec 4, 2023 12:58:10.074791908 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:10.077023029 CET	49747	25	192.168.2.4	64.29.151.236
Dec 4, 2023 12:58:10.200193882 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:10.244201899 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:10.247546911 CET	49747	25	192.168.2.4	64.29.151.236
Dec 4, 2023 12:58:10.371128082 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:10.390538931 CET	25	49745	192.254.190.168	192.168.2.4
Dec 4, 2023 12:58:10.393624067 CET	49745	25	192.168.2.4	192.254.190.168
Dec 4, 2023 12:58:10.467103958 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:10.469120026 CET	49747	25	192.168.2.4	64.29.151.236
Dec 4, 2023 12:58:10.574157953 CET	25	49745	192.254.190.168	192.168.2.4
Dec 4, 2023 12:58:10.577294111 CET	49745	25	192.168.2.4	192.254.190.168
Dec 4, 2023 12:58:10.592118025 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:10.633285999 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:10.634332895 CET	49747	25	192.168.2.4	64.29.151.236
Dec 4, 2023 12:58:10.756886959 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:10.757296085 CET	25	49747	64.29.151.236	192.168.2.4
Dec 4, 2023 12:58:10.757358074 CET	49747	25	192.168.2.4	64.29.151.236
Dec 4, 2023 12:58:10.758744955 CET	25	49745	192.254.190.168	192.168.2.4
Dec 4, 2023 12:58:10.759236097 CET	49745	25	192.168.2.4	192.254.190.168
Dec 4, 2023 12:58:10.979702950 CET	25	49745	192.254.190.168	192.168.2.4
Dec 4, 2023 12:58:13.386580944 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:13.389178991 CET	49746	25	192.168.2.4	131.111.8.146
Dec 4, 2023 12:58:13.605380058 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:16.033025026 CET	25	49745	192.254.190.168	192.168.2.4
Dec 4, 2023 12:58:16.033574104 CET	49745	25	192.168.2.4	192.254.190.168
Dec 4, 2023 12:58:16.213825941 CET	25	49745	192.254.190.168	192.168.2.4
Dec 4, 2023 12:58:16.213947058 CET	49745	25	192.168.2.4	192.254.190.168
Dec 4, 2023 12:58:16.215233088 CET	25	49745	192.254.190.168	192.168.2.4
Dec 4, 2023 12:58:16.215291977 CET	49745	25	192.168.2.4	192.254.190.168
Dec 4, 2023 12:58:18.567420006 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:18.569988012 CET	49746	25	192.168.2.4	131.111.8.146
Dec 4, 2023 12:58:18.745528936 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:23.750859022 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:23.751194954 CET	49746	25	192.168.2.4	131.111.8.146
Dec 4, 2023 12:58:23.926796913 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:23.927007914 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:23.928215981 CET	49746	25	192.168.2.4	131.111.8.146
Dec 4, 2023 12:58:24.103753090 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:24.103919983 CET	49746	25	192.168.2.4	131.111.8.146
Dec 4, 2023 12:58:24.104285002 CET	25	49746	131.111.8.146	192.168.2.4
Dec 4, 2023 12:58:24.104352951 CET	49746	25	192.168.2.4	131.111.8.146
Dec 4, 2023 12:59:06.922250032 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:07.070429087 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:07.070521116 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:07.077595949 CET	49749	25	192.168.2.4	104.47.66.10
Dec 4, 2023 12:59:07.077606916 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:07.077862978 CET	49751	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:07.185058117 CET	25	49750	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:07.185481071 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:07.186220884 CET	25	49751	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:07.186296940 CET	49751	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:07.244482040 CET	25	49749	104.47.66.10	192.168.2.4
Dec 4, 2023 12:59:07.244628906 CET	49749	25	192.168.2.4	104.47.66.10
Dec 4, 2023 12:59:07.411947012 CET	25	49749	104.47.66.10	192.168.2.4
Dec 4, 2023 12:59:07.413867950 CET	49749	25	192.168.2.4	104.47.66.10
Dec 4, 2023 12:59:07.580202103 CET	25	49749	104.47.66.10	192.168.2.4
Dec 4, 2023 12:59:07.587976933 CET	49749	25	192.168.2.4	104.47.66.10
Dec 4, 2023 12:59:07.646557093 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:07.649844885 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:07.798110008 CET	25	49749	104.47.66.10	192.168.2.4
Dec 4, 2023 12:59:07.798666000 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:07.801441908 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:07.828432083 CET	25	49749	104.47.66.10	192.168.2.4
Dec 4, 2023 12:59:07.828876972 CET	49749	25	192.168.2.4	104.47.66.10
Dec 4, 2023 12:59:07.949742079 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:07.950628996 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.031688929 CET	25	49749	104.47.66.10	192.168.2.4
Dec 4, 2023 12:59:08.039952993 CET	49749	25	192.168.2.4	104.47.66.10
Dec 4, 2023 12:59:08.139317989 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.205557108 CET	25	49749	104.47.66.10	192.168.2.4
Dec 4, 2023 12:59:08.206705093 CET	25	49749	104.47.66.10	192.168.2.4
Dec 4, 2023 12:59:08.206770897 CET	49749	25	192.168.2.4	104.47.66.10
Dec 4, 2023 12:59:08.261878967 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.262386084 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.410245895 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.410420895 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.452524900 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.453732967 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.468348026 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.492321968 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.518599987 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.564044952 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.590120077 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.616344929 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.619584084 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.651143074 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.666517973 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.668195009 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.692032099 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.718655109 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.738181114 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.739408970 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.769654989 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.792814016 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.799196005 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.800573111 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.836009979 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.840259075 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.841598988 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.867391109 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.889787912 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.890672922 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.904768944 CET	25	49750	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:08.906450033 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:08.927515984 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.937808037 CET	25	49751	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:08.938978910 CET	49751	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:08.944776058 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.946228027 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.974047899 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:08.984127998 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:08.985246897 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.014094114 CET	25	49750	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.015331984 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:09.016508102 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.022089005 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:09.042257071 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.050534964 CET	25	49751	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.056291103 CET	49751	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:09.070292950 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.075520992 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:09.076822996 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.105048895 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.122581959 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:09.123990059 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.128688097 CET	25	49750	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.129240036 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:09.147891045 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.164534092 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:09.165870905 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.196671963 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.218828917 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:09.220417976 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.253119946 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:09.254265070 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:09.267806053 CET	25	49751	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.268045902 CET	49751	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:09.295898914 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:09.345570087 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:09.403542042 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:09.415235996 CET	25	49751	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.463277102 CET	25	49750	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.463320971 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:09.514920950 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:09.663335085 CET	25	49750	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.720871925 CET	25	49751	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.723778963 CET	49751	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:09.831780910 CET	25	49751	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.832135916 CET	49751	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:09.833125114 CET	25	49751	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:09.833185911 CET	49751	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:10.244328022 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:10.248686075 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:10.284887075 CET	25	49750	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:10.292546988 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:10.396863937 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:10.397037029 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:10.398602009 CET	25	49748	85.187.148.2	192.168.2.4
Dec 4, 2023 12:59:10.398962975 CET	25	49750	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:10.399034977 CET	49748	25	192.168.2.4	85.187.148.2
Dec 4, 2023 12:59:10.399203062 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:10.400949001 CET	25	49750	209.51.188.92	192.168.2.4
Dec 4, 2023 12:59:10.401098967 CET	49750	25	192.168.2.4	209.51.188.92
Dec 4, 2023 12:59:10.882910967 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.013169050 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.013286114 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.171377897 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.172774076 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.296920061 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.306829929 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.309509993 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.440395117 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.441735029 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.444025993 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.572355032 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.597873926 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.599112988 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.732872009 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.734690905 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.750555992 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.766129017 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.803596020 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.829716921 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.861042976 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.878983974 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.882061005 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.888695955 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.890716076 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.913526058 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.926227093 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.928946018 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.952445030 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.955303907 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:11.983855963 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:11.986253977 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.005000114 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.005552053 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.019342899 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.022728920 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.036704063 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.040015936 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.052150011 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.053930998 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.078938961 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.079746962 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.109363079 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.110801935 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.128134966 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.128895998 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.145972013 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.147584915 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.163212061 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.163918018 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.177841902 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.180315018 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.202862978 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.203282118 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.229535103 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.238559008 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.240760088 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.256680965 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.257905960 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.275527954 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.276384115 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.291469097 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.292155027 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.303788900 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.304244995 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.329672098 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.331053019 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.331573009 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.354258060 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.357398987 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.358783960 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.368571043 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.372353077 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.381485939 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.382294893 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.400135040 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.415838957 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.416191101 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.427886009 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.428273916 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.453371048 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.453449965 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.454142094 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.455307961 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.455427885 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.478034019 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.481059074 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.482536077 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.482738972 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.496526003 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.500592947 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.506382942 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.537540913 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.540247917 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.540798903 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.550400972 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.551935911 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.575604916 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.576092958 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.576558113 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.577614069 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.577701092 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.604170084 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.604778051 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.605663061 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.624828100 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.625129938 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.651559114 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.660787106 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.662158012 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.663527966 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.663655996 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.676104069 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.680449009 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.699260950 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.700120926 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.727869987 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.747895002 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.773633957 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.784776926 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.786228895 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.802628994 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.964165926 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.964193106 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:12.964251041 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:12.969423056 CET	49752	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:13.096905947 CET	25	49752	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:47.370423079 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.370477915 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.453355074 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.475187063 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.475256920 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.475765944 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.475831985 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.479952097 CET	49756	25	192.168.2.4	52.101.73.10
Dec 4, 2023 12:59:47.553894043 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.555578947 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.584815979 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.587438107 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.589729071 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.591233015 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.659060955 CET	25	49756	52.101.73.10	192.168.2.4
Dec 4, 2023 12:59:47.659146070 CET	49756	25	192.168.2.4	52.101.73.10
Dec 4, 2023 12:59:47.664602041 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.666456938 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.687863111 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.696016073 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.698360920 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.701301098 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.705784082 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.708878994 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.766748905 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.779486895 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.783416033 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.806910038 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.808543921 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.812552929 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.819097042 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.820899010 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.823553085 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.840111971 CET	25	49756	52.101.73.10	192.168.2.4
Dec 4, 2023 12:59:47.842324018 CET	49756	25	192.168.2.4	52.101.73.10
Dec 4, 2023 12:59:47.888942003 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.891308069 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.892502069 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.917998075 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.934184074 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.969553947 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:47.970973969 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:47.998050928 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.021693945 CET	25	49756	52.101.73.10	192.168.2.4
Dec 4, 2023 12:59:48.025507927 CET	49756	25	192.168.2.4	52.101.73.10
Dec 4, 2023 12:59:48.062076092 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.063544035 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.076234102 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.083276033 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.095901966 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.111804962 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.124229908 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.130999088 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.158891916 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.163736105 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.171211004 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.175404072 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.204950094 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.205054045 CET	25	49756	52.101.73.10	192.168.2.4
Dec 4, 2023 12:59:48.205951929 CET	25	49756	52.101.73.10	192.168.2.4
Dec 4, 2023 12:59:48.206001043 CET	49756	25	192.168.2.4	52.101.73.10
Dec 4, 2023 12:59:48.206214905 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.206264973 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.214360952 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.216809034 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.217418909 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.225378036 CET	49756	25	192.168.2.4	52.101.73.10
Dec 4, 2023 12:59:48.231492996 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.238488913 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.249500990 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.263885021 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.264096975 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.264983892 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.280953884 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.281145096 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.310184002 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.310956001 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.311839104 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.311897993 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.315119028 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.315699100 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.322491884 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.322643995 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.354937077 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.355283022 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.364386082 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.364773989 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.369867086 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.370460987 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.381359100 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.381979942 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.404136896 CET	25	49756	52.101.73.10	192.168.2.4
Dec 4, 2023 12:59:48.407191992 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.415800095 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.416263103 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.417026043 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.417479992 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.417546988 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.417587996 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.427529097 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.427689075 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.455708027 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.456995964 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.465117931 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.465312004 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.475406885 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.476109982 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.482110023 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.483035088 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.507460117 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.507525921 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.516376972 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.516829014 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.522500992 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.522537947 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.523057938 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.523088932 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.532727003 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.532901049 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.560884953 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.562124014 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.568994999 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.569147110 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.580897093 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.581602097 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.583024979 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.583940029 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.618958950 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.618980885 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.619503021 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.624104977 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.627954960 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.627970934 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.628617048 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.637773037 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.637938976 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.662447929 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.663722038 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.669282913 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.669392109 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.683965921 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.685142994 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.686727047 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.687618971 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.719569921 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.720002890 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.724328041 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.733567953 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.734173059 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.735157967 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.742774963 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.742901087 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.750746965 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.764034986 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.765335083 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.769742966 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.769851923 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.785352945 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.786355019 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.792524099 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.793272018 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.820112944 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.820528030 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.839298964 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.840972900 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.847897053 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.848182917 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.856122017 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.858560085 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.865741014 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.866004944 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.867247105 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.870148897 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.870331049 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.886558056 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.887603045 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.898194075 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.899029016 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.920654058 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.921320915 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.945911884 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.946619034 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.953052044 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.956212044 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.967811108 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.970658064 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.972304106 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:48.973124027 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.987812042 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:48.989033937 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.004002094 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.004904985 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.021569967 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.024619102 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.051625967 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.052339077 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.061095953 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.064306021 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.072736025 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.077816963 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.089310884 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.090445042 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.109934092 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.110757113 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.124835014 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.128820896 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.157324076 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.158041954 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.169228077 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.169431925 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.174068928 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.178234100 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.180895090 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.182020903 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.190910101 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.195825100 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.215617895 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.220805883 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.229130030 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.229850054 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.262818098 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.263649940 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.274252892 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.276267052 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.281187057 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.282215118 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.282629013 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.289752960 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.295890093 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.297110081 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.324716091 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.326071978 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.327061892 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.329894066 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.330602884 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.368617058 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.369173050 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.381071091 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.382878065 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.384229898 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.384546041 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.397219896 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.398145914 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.406225920 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.433389902 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.433602095 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.434155941 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.434680939 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.435159922 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.435914040 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.477706909 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.478331089 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.488368988 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.489590883 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.492687941 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.496243954 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.499830961 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.500629902 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.510288954 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.513039112 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.537173033 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.537189960 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.537940979 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.538049936 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.544962883 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.546710968 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.583264112 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.583678961 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.590034008 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.593163013 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.600912094 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.601155996 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.601578951 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.601699114 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.613558054 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.614598989 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.638175011 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.638236046 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.638858080 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.639255047 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.651849031 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.652858973 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.688785076 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.690857887 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.693608999 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.694996119 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.702143908 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.702955008 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.707185030 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.708254099 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.715161085 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.717072010 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.739108086 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.739577055 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.739732981 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.740130901 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.757848024 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.759232044 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.795470953 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.795870066 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.797168970 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.797557116 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.803169012 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.803965092 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.813239098 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.813350916 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.817569971 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.818573952 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.840063095 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.840600014 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.841233969 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.841590881 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.864262104 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.865008116 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.897968054 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.899246931 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.902472019 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.902894020 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.904052019 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.904970884 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.918216944 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.918349981 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.919027090 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.920048952 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.940645933 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.941185951 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.941740990 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.942153931 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.969968081 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:49.970591068 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:49.999654055 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.000962019 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.005439997 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.006187916 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.007844925 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.008296013 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.020503998 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.021362066 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.023286104 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.023462057 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.041438103 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.041798115 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.042476892 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.042668104 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.076273918 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.076726913 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.101332903 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.102404118 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.106288910 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.106901884 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.113183975 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.113465071 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.121643066 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.122272968 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.128492117 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.128658056 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.142082930 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.142445087 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.143045902 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.143285990 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.181643009 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.182123899 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.202734947 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.203804016 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.207005978 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.207711935 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.218415022 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.218843937 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.222662926 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.223542929 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.233510971 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.233700991 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.242790937 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.243222952 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.243596077 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.243868113 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.289022923 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.289608002 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.304174900 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.305310965 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.310736895 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.311408043 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.325679064 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.325838089 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.326232910 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.327090025 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.340423107 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.340624094 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.345160961 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.345738888 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.346079111 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.346347094 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.394593000 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.395277023 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.405639887 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.406881094 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.411895990 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.412697077 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.427783966 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.429013014 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.431159019 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.431730986 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.446130991 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.446469069 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.446727037 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.446767092 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.446908951 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.447191954 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.500225067 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.500924110 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.507098913 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.508328915 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.513518095 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.514453888 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.529309034 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.530396938 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.536649942 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.537105083 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.546690941 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.547133923 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.547466040 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.547750950 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.551665068 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.551840067 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.605823994 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.606538057 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.608508110 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.609870911 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.614520073 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.615457058 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.630815983 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.631999969 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.642014980 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.642512083 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.647672892 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.648202896 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.648822069 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.649091959 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.656831980 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.657071114 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.716094017 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.717062950 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.717346907 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.717992067 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.719676018 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.720535994 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.735519886 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.736607075 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.749639988 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.750086069 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.750541925 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.750579119 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.750967979 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.751283884 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.762242079 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.762411118 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.821094990 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.822244883 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.824003935 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.824687004 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.826319933 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.826859951 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.839760065 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.841135979 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.851062059 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.851461887 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.851584911 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.852051020 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.854902983 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.855273962 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.867419958 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.868211985 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.923119068 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.924356937 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.925071001 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.925905943 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.931870937 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.932538986 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.941703081 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.945139885 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.951766014 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.952181101 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.952398062 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.953130007 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.960542917 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.961452007 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:50.973001003 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:50.973491907 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.024956942 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.026184082 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.026217937 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.027189016 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.037539005 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.040770054 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.045547962 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.046796083 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.052455902 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.053551912 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.053980112 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.054064989 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.066329956 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.066685915 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.078490019 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.078633070 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.126681089 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.127430916 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.127881050 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.128788948 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.145843029 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.147022009 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.147325039 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.148531914 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.154138088 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.154206991 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.154536963 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.154553890 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.172053099 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.172374010 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.183459044 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.183582067 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.228208065 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.228921890 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.229361057 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.230273962 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.248908043 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.250466108 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.251876116 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.252789974 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.254635096 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.254749060 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.255109072 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.255211115 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.277920008 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.280025005 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.288695097 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.292190075 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.329631090 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.330388069 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.332031012 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.332284927 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.350872993 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.353339911 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.355380058 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.355483055 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.355973005 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.356131077 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.358023882 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.358944893 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.385405064 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.398194075 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.432779074 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.432821989 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.435034990 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.435395002 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.454166889 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.456564903 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.456746101 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.457406044 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.457827091 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.460115910 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.463954926 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.473103046 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.473182917 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.473284006 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.504168987 CET	49754	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.528249025 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.535972118 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.536372900 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.537211895 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.538388014 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.557874918 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.557921886 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.559695959 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.559755087 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.560353041 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.564173937 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.600111008 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.604501009 CET	25	49754	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.630584002 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.630901098 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.632175922 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.639070034 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.639487982 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.640461922 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.661274910 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.661318064 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.662863016 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.664792061 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.667869091 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.700747967 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.705064058 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.732811928 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.733371019 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.735183001 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.740606070 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.745971918 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.746014118 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.746069908 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.750886917 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.750926018 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.750993967 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.763025999 CET	49755	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.763906956 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.765249968 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.766105890 CET	49753	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.768277884 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.768841028 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.791986942 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.805783987 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.806898117 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.835609913 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.836729050 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.863590956 CET	25	49755	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.865665913 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.866642952 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.869256973 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.870049953 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.871741056 CET	25	49753	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.892363071 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.893801928 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.907223940 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.907943010 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.937195063 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.941144943 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:51.967063904 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.970352888 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:51.994332075 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:52.008519888 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:52.012931108 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:52.041755915 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:52.114176989 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:52.123889923 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:52.123919010 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:52.123985052 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:52.130213976 CET	49757	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:52.234975100 CET	25	49757	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:55.977638960 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.028328896 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.083342075 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.083447933 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.100336075 CET	49760	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.128562927 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.129769087 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.180979967 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.198801994 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.201497078 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.227873087 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.227941036 CET	49760	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.239578009 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.241192102 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.307801962 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.308326960 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.309001923 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.318008900 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.322616100 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.342067957 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.351619005 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.354509115 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.364473104 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.366926908 CET	49760	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.433943987 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.435753107 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.437804937 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.446549892 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.449822903 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.461610079 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.463989019 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.466202021 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.495002985 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.506169081 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.509021997 CET	49760	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.548894882 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.572181940 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.577204943 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.586384058 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.590786934 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.639188051 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.641479969 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.641617060 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.646032095 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.647483110 CET	49760	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.676078081 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.680376053 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.723563910 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.725625992 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.729404926 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.742125988 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.749362946 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.750874043 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.770679951 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.780435085 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.785909891 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.793440104 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.806639910 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.814691067 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.828233004 CET	49760	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.847270966 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.855895042 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.856328964 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.861469984 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.871058941 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.871834040 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.909638882 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.919334888 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.925827980 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.926317930 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.952949047 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.953649998 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.956794977 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.958131075 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:56.960534096 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.964059114 CET	25	49760	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:56.964133978 CET	49760	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:56.972265005 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:56.972615004 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.026050091 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.031898975 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.033020973 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.047435045 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.055186987 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.058320045 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.059631109 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.060236931 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.060762882 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.061254025 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.064668894 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.073026896 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.073183060 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.133193970 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.134660006 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.135992050 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.140392065 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.140491962 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.160988092 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.162455082 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.163208008 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.163283110 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.168668985 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.169083118 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.173562050 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.173753977 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.198695898 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.198950052 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.240223885 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.241163015 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.246273041 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.246381998 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.262950897 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.263212919 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.263664007 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.264261007 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.265403986 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.274187088 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.274270058 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.274589062 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.274897099 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.326098919 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.326885939 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.347191095 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.348295927 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.351636887 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.351746082 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.364623070 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.365860939 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.374644041 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.374792099 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.382850885 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.383193016 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.394834995 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.395765066 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.455076933 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.455131054 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.455815077 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.456758022 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.458664894 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.469146967 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.470315933 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.477894068 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.478040934 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.491298914 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.491626024 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.523358107 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.524023056 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.561501026 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.562678099 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.570791960 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.572130919 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.578429937 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.578526020 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.584649086 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.585521936 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.596988916 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.597281933 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.651190042 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.652034044 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.669271946 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.670361042 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.673285961 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.674729109 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.681205988 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.681284904 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.703479052 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.703866959 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.712750912 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.713582993 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.775204897 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.775913954 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.776468992 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.777546883 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.779262066 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.780252934 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.782805920 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.782910109 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.809190035 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.809732914 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.840862989 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.841804981 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.876976013 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.881381035 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.883014917 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.883222103 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.884166956 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.907562017 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.908458948 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.915399075 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.916656971 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.969017982 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:57.972896099 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:57.981729984 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.982719898 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:57.989562035 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:57.990039110 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.022156000 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.022541046 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.035873890 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.036848068 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.083035946 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.084114075 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.095350027 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.096754074 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.100019932 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.100635052 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.127998114 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.128448963 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.164139032 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.166826963 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.184567928 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.185870886 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.202236891 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.203275919 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.227778912 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.228796959 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.233949900 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.234307051 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.286664963 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.287986040 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.294022083 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.294620991 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.308926105 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.312238932 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.340055943 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.340449095 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.355923891 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.356781006 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.388880014 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.391793013 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.418968916 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.420732021 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.421863079 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.423055887 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.448450089 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.448815107 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.488939047 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.489821911 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.494659901 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.496145010 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.529023886 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.533358097 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.553173065 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.557044983 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.557136059 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.557712078 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.596698999 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.599713087 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.617144108 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.618419886 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.639199972 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.641172886 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.663825035 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.664107084 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.684403896 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.685400009 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.700076103 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.703645945 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.745884895 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.746793985 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.746864080 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.748241901 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.769752026 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.770062923 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.804323912 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.805847883 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.812716007 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.813922882 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.853859901 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.854968071 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.874341011 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.875228882 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.875566006 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.876092911 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.906402111 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.907730103 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.941112995 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:58.941764116 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:58.960479021 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.961693048 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:58.981569052 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:58.981797934 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.002372980 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.003190041 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.008227110 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.009555101 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.070018053 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.071297884 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.071922064 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.072771072 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.089957952 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.090166092 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.113076925 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.114578009 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.133555889 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.134356022 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.167948008 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.172028065 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.173751116 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.176834106 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.177833080 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.182610989 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.183635950 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.190839052 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.194279909 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.195784092 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.195956945 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.197019100 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.200047970 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.200798035 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.206428051 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.206451893 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.212668896 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.215097904 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.216320992 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.217277050 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.224176884 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.224379063 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.231189013 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.234107971 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.242160082 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.244971037 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.252589941 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.258997917 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.261787891 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.262602091 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.268409967 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.272470951 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.273679972 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.273976088 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.275729895 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.279189110 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.279791117 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.282974958 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.283277035 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.286930084 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.289060116 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.292577028 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.299361944 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.299768925 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.301395893 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.304364920 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.306925058 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.312119007 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.313303947 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.317007065 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.318181038 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.319349051 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.323422909 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.324244022 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.324599981 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.327980042 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.329835892 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.334526062 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.336798906 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.345516920 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.369600058 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.374450922 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.379772902 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.381084919 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.386271954 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.389758110 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.390388966 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.390412092 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.390568972 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.391316891 CET	49758	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.395801067 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.407411098 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.414024115 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.419670105 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.426620007 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.431447983 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.446420908 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.463430882 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.463450909 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.463501930 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.464591026 CET	49759	25	192.168.2.4	142.251.16.27
Dec 4, 2023 12:59:59.491844893 CET	25	49758	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.565988064 CET	25	49759	142.251.16.27	192.168.2.4
Dec 4, 2023 12:59:59.597615957 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.597652912 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 12:59:59.597743988 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.598445892 CET	49761	25	192.168.2.4	142.251.167.26
Dec 4, 2023 12:59:59.725996971 CET	25	49761	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:04.750655890 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:04.805310011 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:04.856702089 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:04.856797934 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:04.876650095 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:04.913302898 CET	49765	25	192.168.2.4	162.255.118.51
Dec 4, 2023 13:00:04.928400993 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:04.928495884 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:04.972332001 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:04.972560883 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.003742933 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:05.003827095 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:05.059911013 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:05.060154915 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:05.078479052 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.081340075 CET	25	49765	162.255.118.51	192.168.2.4
Dec 4, 2023 13:00:05.081424952 CET	49765	25	192.168.2.4	162.255.118.51
Dec 4, 2023 13:00:05.088624001 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.088941097 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.138423920 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:05.138652086 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:05.186731100 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:05.203670025 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.206497908 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.206712008 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.254374981 CET	25	49765	162.255.118.51	192.168.2.4
Dec 4, 2023 13:00:05.261260986 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:05.318141937 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.358712912 CET	49765	25	192.168.2.4	162.255.118.51
Dec 4, 2023 13:00:05.545665979 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.547851086 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.656295061 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.665740967 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.665961981 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.668767929 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.674428940 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.679636002 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.685086966 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.690082073 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.695379019 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.700776100 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.706504107 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.711829901 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.717061043 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.774801970 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.775677919 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.775763035 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.785058975 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.785353899 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.785907984 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.786761045 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.791059971 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.792373896 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.795869112 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.797194004 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.801192045 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.802058935 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.806699038 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.808173895 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.812869072 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.814081907 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.817501068 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.818238020 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.822771072 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.823527098 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.881552935 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.881576061 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.881587982 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.891683102 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.891743898 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.892477989 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.892508030 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.898099899 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.898139000 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.902900934 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.902914047 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.908183098 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.908225060 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.913999081 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.914074898 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.919802904 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.919853926 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.923984051 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.929198980 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.938028097 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.938179016 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:05.938621044 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:05.938643932 CET	49762	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:06.048707962 CET	25	49762	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:06.190577984 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.191442013 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.268693924 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.269009113 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.314106941 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.321391106 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.321599007 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.391415119 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.398613930 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.398808956 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.449556112 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.527174950 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.578844070 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.579165936 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.679722071 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.682684898 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.702116966 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.709523916 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.724662066 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.727890015 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.733144999 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.739078999 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.744672060 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.749635935 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.754245043 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.760123968 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.766192913 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.770994902 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.775918961 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.804918051 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.812005997 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.834708929 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.838855982 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.846369982 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.851080894 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.851984978 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.852056980 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.854334116 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.860165119 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.860955000 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.861948967 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.862370014 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.863773108 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.865607023 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.867845058 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.872062922 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.873236895 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.873614073 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.874903917 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.876874924 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.878309965 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.882592916 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.883352995 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.884052992 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.884732008 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.889152050 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.890101910 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.891181946 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.893524885 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.893672943 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.896696091 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.898586035 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.961227894 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.962266922 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.962404966 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.974210024 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.974720001 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.974834919 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.974947929 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.975090981 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.976618052 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.977854013 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.982496023 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.984972954 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.985600948 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.985699892 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.986855984 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.986888885 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.988411903 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.989100933 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.994622946 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.995980024 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:06.996347904 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.996381998 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.998367071 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.998400927 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:06.999171019 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.001141071 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:07.004792929 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.006215096 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.006249905 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.007342100 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.007430077 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.008492947 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:07.011662960 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.013763905 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:07.013896942 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.013984919 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.015660048 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.019660950 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.019773006 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.085920095 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.085973024 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.086009979 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.096910000 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.097143888 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.099809885 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.099843979 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.107095003 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.107347012 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.111826897 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.111860037 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.118621111 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.118778944 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.123827934 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.123862028 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.130403042 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.130439997 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.135659933 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.135767937 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.176740885 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.176781893 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.176862001 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:07.178119898 CET	49764	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:07.274255037 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.274413109 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.275011063 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:07.275011063 CET	49763	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:07.305571079 CET	25	49764	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:07.399966002 CET	25	49763	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:08.149826050 CET	25	49765	162.255.118.51	192.168.2.4
Dec 4, 2023 13:00:08.150037050 CET	49765	25	192.168.2.4	162.255.118.51
Dec 4, 2023 13:00:08.317704916 CET	25	49765	162.255.118.51	192.168.2.4
Dec 4, 2023 13:00:08.317850113 CET	25	49765	162.255.118.51	192.168.2.4
Dec 4, 2023 13:00:08.318186998 CET	49765	25	192.168.2.4	162.255.118.51
Dec 4, 2023 13:00:08.487663984 CET	25	49765	162.255.118.51	192.168.2.4
Dec 4, 2023 13:00:08.487778902 CET	49765	25	192.168.2.4	162.255.118.51
Dec 4, 2023 13:00:08.698513985 CET	25	49765	162.255.118.51	192.168.2.4
Dec 4, 2023 13:00:08.710100889 CET	25	49765	162.255.118.51	192.168.2.4
Dec 4, 2023 13:00:08.710474014 CET	49765	25	192.168.2.4	162.255.118.51
Dec 4, 2023 13:00:08.878710985 CET	25	49765	162.255.118.51	192.168.2.4
Dec 4, 2023 13:00:08.884160042 CET	49765	25	192.168.2.4	162.255.118.51
Dec 4, 2023 13:00:13.388433933 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:13.510711908 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:13.516197920 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:13.622936010 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:13.647171974 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:13.652316093 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:13.726242065 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:13.728303909 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:13.744101048 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:13.774529934 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:13.833717108 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:13.834455013 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:13.837546110 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:13.838408947 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:13.844408989 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:13.844490051 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:13.938741922 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:13.948767900 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:13.953980923 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:13.956624985 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:13.964297056 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:14.015002012 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:14.046300888 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:14.046300888 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:14.947715998 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:14.947719097 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:14.947865009 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:14.949525118 CET	49769	25	192.168.2.4	66.196.36.12
Dec 4, 2023 13:00:15.048464060 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.053334951 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.055351019 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.055614948 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.058969021 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.059290886 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.075553894 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.111608028 CET	25	49769	66.196.36.12	192.168.2.4
Dec 4, 2023 13:00:15.111711025 CET	49769	25	192.168.2.4	66.196.36.12
Dec 4, 2023 13:00:15.160960913 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.164664984 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.167443991 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.167650938 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.228240967 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.228471041 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.273750067 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.304883957 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.305094004 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.314003944 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.314204931 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.350716114 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.358448982 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.358782053 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.361809015 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.366322994 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.371068001 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.375832081 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.380531073 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.385276079 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.389964104 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.393922091 CET	25	49769	66.196.36.12	192.168.2.4
Dec 4, 2023 13:00:15.394141912 CET	49769	25	192.168.2.4	66.196.36.12
Dec 4, 2023 13:00:15.394931078 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.399611950 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.404225111 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.410801888 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.413059950 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.414346933 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.421884060 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.431952953 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.434600115 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.443562984 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.444422960 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.447869062 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.451322079 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.454585075 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.457253933 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.460602045 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.463237047 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.466564894 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.473478079 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.480561018 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.483971119 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.484970093 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.486191988 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.486808062 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.492122889 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.492681026 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.493710995 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.496068954 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.496274948 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.501183987 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.501425028 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.502595901 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.504179955 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.505511999 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.510907888 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.513348103 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.513385057 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.517606020 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.522140980 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.526247025 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.535048962 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.535661936 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.535661936 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.536381960 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.541893005 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.547364950 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.547944069 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.548799038 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.549645901 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.550565958 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.551707983 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.551815987 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.552886963 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.557024002 CET	25	49769	66.196.36.12	192.168.2.4
Dec 4, 2023 13:00:15.557279110 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.557511091 CET	49769	25	192.168.2.4	66.196.36.12
Dec 4, 2023 13:00:15.557919025 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.558860064 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.559856892 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.560760975 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.560969114 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.561882019 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.562040091 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.563704014 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.564438105 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.566740990 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.566999912 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.570745945 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.572599888 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.573668003 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.577142000 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.580699921 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.581460953 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.586378098 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.587613106 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.587945938 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.588157892 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.589222908 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.592236042 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.593020916 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.593123913 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.594074011 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.596545935 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.597543001 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.600810051 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.601522923 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.601739883 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.602459908 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.603286982 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.606009007 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.606770039 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.607141018 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.607291937 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.607485056 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.607980967 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.611368895 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.612106085 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.612313032 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.618057013 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.618191004 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.618222952 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.618261099 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.618362904 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.618741989 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.623106003 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.626349926 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.626533985 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.626565933 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.627090931 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.628513098 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.631098032 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.633936882 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.636157036 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.636193991 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.636225939 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.636931896 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.638268948 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.643464088 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.648967028 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.649013996 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.650079966 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.651016951 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.651046038 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.653311968 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.653366089 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.658823967 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.659275055 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.659369946 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.659950972 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.661056042 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.661114931 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.662333012 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.662368059 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.664072037 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.665038109 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.669471979 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.671694994 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.675106049 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.677568913 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.680772066 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.681690931 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.685405016 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.686748981 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.688699007 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.688752890 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.689042091 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.689538956 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.693276882 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.694699049 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.695028067 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.695060968 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.697743893 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.701335907 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.702554941 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.703746080 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.707184076 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.707609892 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.712364912 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.712578058 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.718329906 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.718501091 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.719779968 CET	25	49769	66.196.36.12	192.168.2.4
Dec 4, 2023 13:00:15.721424103 CET	49769	25	192.168.2.4	66.196.36.12
Dec 4, 2023 13:00:15.723253012 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.728638887 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.730082035 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.731725931 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.734096050 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.737431049 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.738595009 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.744167089 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.747601032 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.747634888 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.747685909 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.748545885 CET	49768	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.749188900 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.750168085 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.760541916 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.760574102 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.760742903 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.761373043 CET	49767	25	192.168.2.4	142.251.16.27
Dec 4, 2023 13:00:15.782052040 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.809653997 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.809710026 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:15.809958935 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.810602903 CET	49766	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:15.849169016 CET	25	49768	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.861757040 CET	25	49767	142.251.16.27	192.168.2.4
Dec 4, 2023 13:00:15.887720108 CET	25	49769	66.196.36.12	192.168.2.4
Dec 4, 2023 13:00:15.888624907 CET	49769	25	192.168.2.4	66.196.36.12
Dec 4, 2023 13:00:15.937997103 CET	25	49766	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:16.051702976 CET	25	49769	66.196.36.12	192.168.2.4
Dec 4, 2023 13:00:16.051780939 CET	49769	25	192.168.2.4	66.196.36.12
Dec 4, 2023 13:00:16.052695990 CET	25	49769	66.196.36.12	192.168.2.4
Dec 4, 2023 13:00:16.055031061 CET	49769	25	192.168.2.4	66.196.36.12
Dec 4, 2023 13:00:23.450489998 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:23.531820059 CET	49771	25	192.168.2.4	17.57.154.33
Dec 4, 2023 13:00:23.577994108 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:23.579197884 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:23.681238890 CET	25	49771	17.57.154.33	192.168.2.4
Dec 4, 2023 13:00:23.684186935 CET	49771	25	192.168.2.4	17.57.154.33
Dec 4, 2023 13:00:23.715734959 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:23.715970039 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:23.834898949 CET	25	49771	17.57.154.33	192.168.2.4
Dec 4, 2023 13:00:23.835134029 CET	49771	25	192.168.2.4	17.57.154.33
Dec 4, 2023 13:00:23.843480110 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:23.853503942 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:23.856446981 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:23.984713078 CET	25	49771	17.57.154.33	192.168.2.4
Dec 4, 2023 13:00:23.984818935 CET	25	49771	17.57.154.33	192.168.2.4
Dec 4, 2023 13:00:23.985162973 CET	49771	25	192.168.2.4	17.57.154.33
Dec 4, 2023 13:00:23.989290953 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:23.991285086 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:23.991462946 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.124456882 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.136010885 CET	25	49771	17.57.154.33	192.168.2.4
Dec 4, 2023 13:00:24.136115074 CET	49771	25	192.168.2.4	17.57.154.33
Dec 4, 2023 13:00:24.238989115 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.239170074 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.327014923 CET	25	49771	17.57.154.33	192.168.2.4
Dec 4, 2023 13:00:24.367701054 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.374867916 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.375247955 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.382080078 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.386562109 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.391566992 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.396081924 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.400863886 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.405488968 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.410517931 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.415091991 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.419776917 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.424782038 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.510144949 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.510267019 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.512530088 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.513727903 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.516216993 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.517632008 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.520430088 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.521790981 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.525423050 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.526861906 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.529802084 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.531076908 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.534337044 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.535818100 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.538814068 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.540242910 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.543524981 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.544929981 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.547986031 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.549169064 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.553098917 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.638190031 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.643718004 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.643755913 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.647066116 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.647099972 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.649499893 CET	25	49771	17.57.154.33	192.168.2.4
Dec 4, 2023 13:00:24.649540901 CET	25	49771	17.57.154.33	192.168.2.4
Dec 4, 2023 13:00:24.649586916 CET	49771	25	192.168.2.4	17.57.154.33
Dec 4, 2023 13:00:24.650015116 CET	49771	25	192.168.2.4	17.57.154.33
Dec 4, 2023 13:00:24.651602030 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.651722908 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.656213045 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.656232119 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.660986900 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.661118984 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.665249109 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.665388107 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.670494080 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.670546055 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.672404051 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.672485113 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.677133083 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.677150965 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.726624012 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.726661921 CET	25	49770	142.251.167.26	192.168.2.4
Dec 4, 2023 13:00:24.726731062 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.728065968 CET	49770	25	192.168.2.4	142.251.167.26
Dec 4, 2023 13:00:24.850956917 CET	25	49770	142.251.167.26	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2023 12:56:38.617208004 CET	51038	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:38.712129116 CET	53	51038	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:38.733052015 CET	54828	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:38.828021049 CET	53	54828	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.199285984 CET	54829	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.296446085 CET	53	54829	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.310018063 CET	54830	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.349865913 CET	54831	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.406470060 CET	53	54830	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.438976049 CET	54832	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.447907925 CET	53	54831	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.474900007 CET	54833	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.532509089 CET	54834	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.536264896 CET	53	54832	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.572977066 CET	53	54833	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.583698034 CET	54835	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.629677057 CET	53	54834	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.646394968 CET	54836	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.680444956 CET	53	54835	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.721318960 CET	54837	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.744317055 CET	53	54836	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.792948008 CET	54838	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.819017887 CET	53	54837	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.855591059 CET	54839	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.891000032 CET	53	54838	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.917095900 CET	54840	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:45.954781055 CET	53	54839	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:45.992125988 CET	54841	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.014142990 CET	53	54840	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.060656071 CET	54842	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.089236975 CET	53	54841	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.116363049 CET	54843	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.157896042 CET	53	54842	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.162630081 CET	54844	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.217000008 CET	53	54843	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.233717918 CET	54845	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.260643005 CET	53	54844	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.298243046 CET	54846	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.330054045 CET	53	54845	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.356503010 CET	54847	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.395101070 CET	53	54846	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.416532993 CET	54848	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.451685905 CET	53	54847	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.512583017 CET	54849	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.513133049 CET	53	54848	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.551721096 CET	54850	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.599066019 CET	54851	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.608899117 CET	53	54849	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.648612022 CET	53	54850	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.666831970 CET	54852	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.694787025 CET	53	54851	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.726443052 CET	54853	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.763109922 CET	53	54852	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.784470081 CET	54854	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.822603941 CET	53	54853	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.845383883 CET	54855	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.884673119 CET	53	54854	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.916975975 CET	54856	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:46.942701101 CET	53	54855	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:46.973804951 CET	54857	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.015193939 CET	53	54856	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.023700953 CET	54858	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.069314003 CET	53	54857	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.086271048 CET	54859	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.119302988 CET	53	54858	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.148869038 CET	54860	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.182794094 CET	53	54859	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.223227978 CET	54861	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.247742891 CET	53	54860	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.278407097 CET	54862	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.319988012 CET	53	54861	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.341114044 CET	54863	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.377485037 CET	53	54862	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.404840946 CET	54864	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.439150095 CET	53	54863	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.480418921 CET	54865	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.501830101 CET	53	54864	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.527740002 CET	54866	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:56:47.577759027 CET	53	54865	1.1.1.1	192.168.2.4
Dec 4, 2023 12:56:47.624058962 CET	53	54866	1.1.1.1	192.168.2.4
Dec 4, 2023 12:57:08.834614038 CET	52411	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:57:08.905287027 CET	52412	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:57:08.935079098 CET	53	52411	1.1.1.1	192.168.2.4
Dec 4, 2023 12:57:08.944775105 CET	51141	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:57:08.960414886 CET	51142	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:57:09.000550032 CET	53	52412	1.1.1.1	192.168.2.4
Dec 4, 2023 12:57:09.043661118 CET	51143	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:57:09.044761896 CET	53	51141	1.1.1.1	192.168.2.4
Dec 4, 2023 12:57:09.055695057 CET	53	51142	1.1.1.1	192.168.2.4
Dec 4, 2023 12:57:09.139024019 CET	53	51143	1.1.1.1	192.168.2.4
Dec 4, 2023 12:57:36.603219032 CET	58690	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:57:36.697988987 CET	53	58690	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:03.465971947 CET	58692	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:03.510313988 CET	59483	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:03.569813967 CET	53	58692	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:03.584434032 CET	59350	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:03.607568026 CET	53	59483	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:03.622838974 CET	59351	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:03.622878075 CET	61580	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:03.688302040 CET	53	59350	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:03.718607903 CET	53	61580	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:03.728634119 CET	53	59351	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:03.740166903 CET	58463	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:03.912859917 CET	53	58463	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:03.924747944 CET	58464	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:04.206684113 CET	53	58464	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:04.207446098 CET	55886	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:04.712810993 CET	53	55886	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:07.119013071 CET	55887	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:07.178853035 CET	55888	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:07.283826113 CET	55889	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:07.291105032 CET	53	55888	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:07.302264929 CET	53	55887	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:07.302917957 CET	60835	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:07.305835009 CET	60836	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:07.482788086 CET	53	60835	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:07.492816925 CET	53	55889	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:07.494678974 CET	61403	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:07.657799959 CET	53	61403	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:07.985611916 CET	53	60836	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:10.882945061 CET	61404	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:10.979995012 CET	53	61404	1.1.1.1	192.168.2.4
Dec 4, 2023 12:58:10.988212109 CET	63341	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:58:11.090390921 CET	53	63341	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:06.709422112 CET	63342	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:06.712753057 CET	63343	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:06.773587942 CET	63344	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:06.810046911 CET	53	63343	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:06.810802937 CET	50107	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:06.824368954 CET	53	63342	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:06.825021982 CET	63183	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:06.837090015 CET	63184	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:06.883122921 CET	53	63344	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:06.886151075 CET	57678	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:06.921446085 CET	53	63183	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:06.961072922 CET	53	63184	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:06.991183043 CET	53	50107	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:06.996057987 CET	53	57678	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:10.670665979 CET	57679	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:10.772983074 CET	53	57679	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:10.785085917 CET	58157	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:10.881917953 CET	53	58157	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:47.148745060 CET	58158	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:47.210634947 CET	58159	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:47.243912935 CET	53	58158	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:47.271567106 CET	52600	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:47.280262947 CET	52601	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:47.307240963 CET	53	58159	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:47.337029934 CET	52602	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:47.368109941 CET	53	52600	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:47.375308037 CET	53	52601	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:47.376770973 CET	61041	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:47.434587002 CET	53	52602	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:47.472886086 CET	53	61041	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:48.297982931 CET	61042	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:48.393649101 CET	53	61042	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:51.547020912 CET	61043	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:51.644685030 CET	53	61043	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:51.731152058 CET	61044	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:51.801286936 CET	61045	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:51.843180895 CET	53	61044	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:51.898251057 CET	53	61045	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:55.857830048 CET	61046	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:55.917257071 CET	61047	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:55.954401016 CET	53	61046	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:55.988451004 CET	61048	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:56.012269974 CET	53	61047	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:56.042936087 CET	61049	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:56.085059881 CET	53	61048	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:56.162161112 CET	53	61049	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:56.890754938 CET	61050	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:56.989005089 CET	53	61050	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:57.073013067 CET	61051	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:57.169759035 CET	53	61051	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:57.193279028 CET	61052	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:57.291544914 CET	53	61052	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:57.361696005 CET	61053	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:57.458709002 CET	53	61053	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:57.512841940 CET	61054	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:57.629976988 CET	53	61054	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:57.700805902 CET	61055	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:57.798849106 CET	53	61055	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:57.957540035 CET	61056	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:58.055202007 CET	53	61056	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:58.146372080 CET	61057	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:58.243330002 CET	53	61057	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:58.311306953 CET	61058	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:58.408608913 CET	53	61058	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:58.497687101 CET	61059	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:58.595101118 CET	53	61059	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:58.678091049 CET	61060	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:58.775779963 CET	53	61060	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:58.832895994 CET	61061	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:58.929356098 CET	53	61061	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:58.986820936 CET	61062	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.086363077 CET	53	61062	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.120625973 CET	61063	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.217323065 CET	53	61063	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.291026115 CET	61064	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.387880087 CET	53	61064	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.433757067 CET	61065	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.490381956 CET	61066	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.530201912 CET	53	61065	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.580461025 CET	61067	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.587235928 CET	53	61066	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.616143942 CET	61068	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.676064968 CET	53	61067	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.682137012 CET	61069	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.712975979 CET	53	61068	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.744831085 CET	61070	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.780025959 CET	53	61069	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.805339098 CET	61071	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.842062950 CET	53	61070	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.865484953 CET	61072	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.903774023 CET	53	61071	1.1.1.1	192.168.2.4
Dec 4, 2023 12:59:59.932988882 CET	61073	53	192.168.2.4	1.1.1.1
Dec 4, 2023 12:59:59.962491989 CET	53	61072	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:00.029608965 CET	53	61073	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:00.056797028 CET	61074	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:00.114988089 CET	61075	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:00.153956890 CET	53	61074	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:00.211914062 CET	53	61075	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:04.568422079 CET	61076	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:04.630245924 CET	61077	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:04.692828894 CET	61078	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:04.723175049 CET	53	61076	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:04.724934101 CET	53	61077	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:04.742481947 CET	62408	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:04.756691933 CET	62409	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:04.793731928 CET	53	61078	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:04.859818935 CET	53	62409	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:04.912470102 CET	53	62408	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:06.005546093 CET	62410	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:06.103354931 CET	53	62410	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:06.194788933 CET	62411	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:06.292927027 CET	53	62411	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:06.380794048 CET	62412	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:06.477243900 CET	53	62412	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:06.598905087 CET	62413	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:06.696531057 CET	53	62413	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:06.756159067 CET	62414	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:06.855206013 CET	53	62414	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:06.959352016 CET	62415	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:07.056210041 CET	53	62415	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:07.149635077 CET	62416	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:07.246150017 CET	53	62416	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:07.271274090 CET	62417	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:07.334467888 CET	62418	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:07.367964029 CET	53	62417	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:07.435425997 CET	53	62418	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:07.460341930 CET	62419	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:07.557687998 CET	53	62419	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:07.584614038 CET	62420	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:07.682271004 CET	53	62420	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:07.709462881 CET	62421	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:07.771472931 CET	62422	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:07.808274984 CET	53	62421	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:07.871501923 CET	53	62422	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:13.262166023 CET	62423	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:13.318734884 CET	62424	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:13.363017082 CET	53	62423	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:13.394731998 CET	62425	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:13.443315983 CET	53	62424	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:13.490417004 CET	53	62425	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:13.599760056 CET	52799	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:13.633389950 CET	52800	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:13.730346918 CET	53	52800	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:13.978374958 CET	53	52799	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:15.818461895 CET	52801	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:15.916292906 CET	53	52801	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:16.005812883 CET	52802	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:16.102771997 CET	53	52802	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:16.192451000 CET	52803	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:16.289403915 CET	53	52803	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:16.381217003 CET	52804	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:16.479007959 CET	53	52804	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:16.568037033 CET	52805	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:16.664668083 CET	53	52805	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:16.755254984 CET	52806	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:16.852395058 CET	53	52806	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:23.208739042 CET	52807	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:23.270823002 CET	52808	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:23.404135942 CET	52809	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:23.429430008 CET	53	52808	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:23.434763908 CET	53	52807	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:23.435187101 CET	49790	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:23.500766993 CET	53	52809	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:23.521423101 CET	49791	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:23.529772997 CET	53	49790	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:23.583688974 CET	49792	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:23.619131088 CET	53	49791	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:23.680430889 CET	53	49792	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:23.709330082 CET	49793	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:23.805989027 CET	53	49793	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:23.833626986 CET	49794	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:23.960551023 CET	49795	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:24.002531052 CET	53	49794	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:24.022763968 CET	49796	53	192.168.2.4	1.1.1.1
Dec 4, 2023 13:00:24.058168888 CET	53	49795	1.1.1.1	192.168.2.4
Dec 4, 2023 13:00:24.120316029 CET	53	49796	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 4, 2023 12:56:38.617208004 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	yahoo.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:38.733052015 CET	192.168.2.4	1.1.1.1	0xcf95	Standard query (0)	mta6.am0.yahoodns.net	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:56:45.199285984 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.310018063 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.349865913 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.438976049 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.474900007 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.532509089 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.583698034 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.646394968 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.721318960 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.792948008 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.855591059 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.917095900 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.992125988 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.060656071 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.116363049 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.162630081 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.233717918 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.298243046 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.356503010 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.416532993 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.512583017 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.551721096 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.599066019 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.666831970 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.726443052 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.784470081 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.845383883 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.916975975 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.973804951 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.023700953 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.086271048 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.148869038 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.223227978 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.278407097 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.341114044 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.404840946 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.480418921 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.527740002 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4x.png	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:08.834614038 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:08.905287027 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:08.944775105 CET	192.168.2.4	1.1.1.1	0x4c8c	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:57:08.960414886 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.043661118 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:36.603219032 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	z	0	0	false
Dec 4, 2023 12:58:03.465971947 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	pobox.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.510313988 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	netcom.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.584434032 CET	192.168.2.4	1.1.1.1	0xbcbb	Standard query (0)	pb-mx22.pobox.com	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:03.622838974 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	northcoast.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.622878075 CET	192.168.2.4	1.1.1.1	0x3f1	Standard query (0)	mx01.earthlink-vadesecure.net	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:03.740166903 CET	192.168.2.4	1.1.1.1	0x3565	Standard query (0)	mxa-00377f01.gslb.pphosted.com	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:03.924747944 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	onlineconnections.com.au	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:04.207446098 CET	192.168.2.4	1.1.1.1	0x307c	Standard query (0)	onlineconnections.com.au	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:07.119013071 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	cl.cam.ac.uk	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:07.178853035 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	src.dec.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:07.283826113 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	theriver.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:07.302917957 CET	192.168.2.4	1.1.1.1	0xbb23	Standard query (0)	mx.cam.ac.uk	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:07.305835009 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	bryson.demon.co.uk	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:07.494678974 CET	192.168.2.4	1.1.1.1	0xaf88	Standard query (0)	ismtp.sitestar.everyone.net	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:10.882945061 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	openoffice.org	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:10.988212109 CET	192.168.2.4	1.1.1.1	0xdc9f	Standard query (0)	mx2-lw-eu.apache.org	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:06.709422112 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:06.712753057 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	alumni.caltech.edu	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:06.773587942 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:06.810802937 CET	192.168.2.4	1.1.1.1	0x8e6b	Standard query (0)	alumni-caltech-edu.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:06.825021982 CET	192.168.2.4	1.1.1.1	0xef33	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:06.837090015 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:06.886151075 CET	192.168.2.4	1.1.1.1	0x3aa4	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:10.670665979 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	kinoho.net	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:10.785085917 CET	192.168.2.4	1.1.1.1	0x24d7	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.148745060 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.210634947 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.271567106 CET	192.168.2.4	1.1.1.1	0xc1df	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.280262947 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	outlook.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.337029934 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.376770973 CET	192.168.2.4	1.1.1.1	0xde3a	Standard query (0)	outlook-com.olc.protection.outlook.com	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:48.297982931 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:51.547020912 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.4.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:51.731152058 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4.2.1	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:51.801286936 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	1.1.49-custom.16	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:55.857830048 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:55.917257071 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:55.988451004 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	cryptsoft.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.042936087 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	cryptsoft.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.890754938 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	18.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.073013067 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	8.9.15	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.193279028 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	8.110.4	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.361696005 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.2.11	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.512841940 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.6.33	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.700805902 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3.4.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.957540035 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3.4.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.146372080 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	8.8.29	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.311306953 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	7.22.5	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.497687101 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	18.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.678091049 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.832895994 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	18.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.986820936 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3.3.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.120625973 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4.0.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.291026115 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	18.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.433757067 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	0.23.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.490381956 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.0.12	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.580461025 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.0.12	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.616143942 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	1.0.5	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.682137012 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	1.0.5	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.744831085 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	0.11.10	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.805339098 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	0.11.10	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.865484953 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	15.7.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.932988882 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	15.7.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:00.056797028 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4.2.1	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:00.114988089 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.4.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.568422079 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	cloudhead.net	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.630245924 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.692828894 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	tootallnate.net	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.742481947 CET	192.168.2.4	1.1.1.1	0x4704	Standard query (0)	eforward1.registrar-servers.com	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:04.756691933 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	luiscouto.pt	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.005546093 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	8.5.22	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.194788933 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3.4.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.380794048 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3.1.74	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.598905087 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	7.2.9	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.756159067 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	8.2.11	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.959352016 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	18.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.149635077 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.271274090 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	18.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.334467888 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3.3.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.460341930 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	4.0.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.584614038 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	1.10.295	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.709462881 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.2.15	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.771472931 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	0.23.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.262166023 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	thejameskyle.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.318734884 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	vision-media.ca	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.394731998 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.599760056 CET	192.168.2.4	1.1.1.1	0xe0e2	Standard query (0)	mail.reg.ca	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:13.633389950 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:15.818461895 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	8.2.42	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.005812883 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	3.4.2	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.192451000 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	8.5.12	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.381217003 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	7.2.9	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.568037033 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	7.2.9	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.755254984 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	18.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.208739042 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	sitnik.ru	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.270823002 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	blakeembrey.com	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.404135942 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	18.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.435187101 CET	192.168.2.4	1.1.1.1	0xb18d	Standard query (0)	mx01.mail.icloud.com	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:23.521423101 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.5.3	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.583688974 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	2.5.3	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.709330082 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	18.2.0	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.833626986 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	8.13.17	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.960551023 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	8.6.28	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:24.022763968 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	9.0.6	MX (Mail exchange)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 4, 2023 12:56:38.712129116 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:38.712129116 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:38.712129116 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:38.828021049 CET	1.1.1.1	192.168.2.4	0xcf95	No error (0)	mta6.am0.yahoodns.net		67.195.204.73	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:56:38.828021049 CET	1.1.1.1	192.168.2.4	0xcf95	No error (0)	mta6.am0.yahoodns.net		67.195.204.79	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:56:38.828021049 CET	1.1.1.1	192.168.2.4	0xcf95	No error (0)	mta6.am0.yahoodns.net		67.195.228.106	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:56:38.828021049 CET	1.1.1.1	192.168.2.4	0xcf95	No error (0)	mta6.am0.yahoodns.net		67.195.228.109	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:56:38.828021049 CET	1.1.1.1	192.168.2.4	0xcf95	No error (0)	mta6.am0.yahoodns.net		67.195.228.110	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:56:38.828021049 CET	1.1.1.1	192.168.2.4	0xcf95	No error (0)	mta6.am0.yahoodns.net		67.195.204.77	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:56:38.828021049 CET	1.1.1.1	192.168.2.4	0xcf95	No error (0)	mta6.am0.yahoodns.net		67.195.204.72	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:56:38.828021049 CET	1.1.1.1	192.168.2.4	0xcf95	No error (0)	mta6.am0.yahoodns.net		67.195.228.94	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:56:45.296446085 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.406470060 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.447907925 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.536264896 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.572977066 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.629677057 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.680444956 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.744317055 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.819017887 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.891000032 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:45.954781055 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.014142990 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.089236975 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.157896042 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.217000008 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.260643005 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.330054045 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.395101070 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.451685905 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.513133049 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.608899117 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.648612022 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.694787025 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.763109922 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.822603941 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.884673119 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:46.942701101 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.015193939 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.069314003 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.119302988 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.182794094 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.247742891 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.319988012 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.377485037 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.439150095 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.501830101 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.577759027 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:56:47.624058962 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4x.png	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:08.935079098 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:08.935079098 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:08.935079098 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:08.935079098 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:08.935079098 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.000550032 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.000550032 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.000550032 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.000550032 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.000550032 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.044761896 CET	1.1.1.1	192.168.2.4	0x4c8c	No error (0)	gmail-smtp-in.l.google.com		172.253.115.27	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:57:09.055695057 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.055695057 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.055695057 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.055695057 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.055695057 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.139024019 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.139024019 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.139024019 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.139024019 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:09.139024019 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:57:36.697988987 CET	1.1.1.1	192.168.2.4	0x11df	Not Implemented (4)	z	none	none	0	0	false
Dec 4, 2023 12:58:03.569813967 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.569813967 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.569813967 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.569813967 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.569813967 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.569813967 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.569813967 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.569813967 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.607568026 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.607568026 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.607568026 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.607568026 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.688302040 CET	1.1.1.1	192.168.2.4	0xbcbb	No error (0)	pb-mx22.pobox.com		173.228.157.41	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:03.718607903 CET	1.1.1.1	192.168.2.4	0x3f1	No error (0)	mx01.earthlink-vadesecure.net		51.81.61.70	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:03.728634119 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.728634119 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.728634119 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.728634119 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:03.912859917 CET	1.1.1.1	192.168.2.4	0x3565	No error (0)	mxa-00377f01.gslb.pphosted.com		185.183.28.235	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:04.206684113 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	onlineconnections.com.au			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:04.712810993 CET	1.1.1.1	192.168.2.4	0x307c	No error (0)	onlineconnections.com.au		192.254.190.168	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:07.291105032 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	src.dec.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:07.302264929 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cl.cam.ac.uk			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:07.482788086 CET	1.1.1.1	192.168.2.4	0xbb23	No error (0)	mx.cam.ac.uk		131.111.8.146	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:07.482788086 CET	1.1.1.1	192.168.2.4	0xbb23	No error (0)	mx.cam.ac.uk		131.111.8.147	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:07.482788086 CET	1.1.1.1	192.168.2.4	0xbb23	No error (0)	mx.cam.ac.uk		131.111.8.148	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:07.482788086 CET	1.1.1.1	192.168.2.4	0xbb23	No error (0)	mx.cam.ac.uk		131.111.8.149	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:07.492816925 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	theriver.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:07.657799959 CET	1.1.1.1	192.168.2.4	0xaf88	No error (0)	ismtp.sitestar.everyone.net		64.29.151.236	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:58:07.985611916 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	bryson.demon.co.uk	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:10.979995012 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:10.979995012 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:10.979995012 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:10.979995012 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:58:11.090390921 CET	1.1.1.1	192.168.2.4	0xdc9f	Name error (3)	mx2-lw-eu.apache.org	none	none	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:06.810046911 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	alumni.caltech.edu			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:06.824368954 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:06.883122921 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:06.921446085 CET	1.1.1.1	192.168.2.4	0xef33	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:06.961072922 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:06.991183043 CET	1.1.1.1	192.168.2.4	0x8e6b	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.66.10	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:06.991183043 CET	1.1.1.1	192.168.2.4	0x8e6b	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.55.138	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:06.996057987 CET	1.1.1.1	192.168.2.4	0x3aa4	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:10.772983074 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:10.772983074 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:10.772983074 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:10.772983074 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:10.772983074 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:10.881917953 CET	1.1.1.1	192.168.2.4	0x24d7	No error (0)	aspmx.l.google.com		142.251.167.26	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.243912935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.243912935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.243912935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.243912935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.243912935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.307240963 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.307240963 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.307240963 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.307240963 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.307240963 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.368109941 CET	1.1.1.1	192.168.2.4	0xc1df	No error (0)	gmail-smtp-in.l.google.com		142.251.16.27	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.375308037 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	outlook.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.434587002 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.434587002 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.434587002 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.434587002 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.434587002 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:47.472886086 CET	1.1.1.1	192.168.2.4	0xde3a	No error (0)	outlook-com.olc.protection.outlook.com		52.101.73.10	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.472886086 CET	1.1.1.1	192.168.2.4	0xde3a	No error (0)	outlook-com.olc.protection.outlook.com		52.101.40.3	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.472886086 CET	1.1.1.1	192.168.2.4	0xde3a	No error (0)	outlook-com.olc.protection.outlook.com		52.101.89.1	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.472886086 CET	1.1.1.1	192.168.2.4	0xde3a	No error (0)	outlook-com.olc.protection.outlook.com		52.101.9.3	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.472886086 CET	1.1.1.1	192.168.2.4	0xde3a	No error (0)	outlook-com.olc.protection.outlook.com		52.101.9.16	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.472886086 CET	1.1.1.1	192.168.2.4	0xde3a	No error (0)	outlook-com.olc.protection.outlook.com		52.101.99.1	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:47.472886086 CET	1.1.1.1	192.168.2.4	0xde3a	No error (0)	outlook-com.olc.protection.outlook.com		52.101.40.25	A (IP address)	IN (0x0001)	false
Dec 4, 2023 12:59:48.393649101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:48.393649101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:48.393649101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:48.393649101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:48.393649101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:51.644685030 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.4.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:51.843180895 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4.2.1	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:51.898251057 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	1.1.49-custom.16	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:55.954401016 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:55.954401016 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:55.954401016 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:55.954401016 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:55.954401016 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.012269974 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.012269974 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.012269974 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.012269974 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.012269974 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.085059881 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.085059881 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.085059881 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.085059881 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.085059881 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.162161112 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.162161112 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.162161112 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.162161112 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.162161112 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:56.989005089 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	18.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.169759035 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	8.9.15	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.291544914 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	8.110.4	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.458709002 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.2.11	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.629976988 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.6.33	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:57.798849106 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3.4.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.055202007 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3.4.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.243330002 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	8.8.29	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.408608913 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	7.22.5	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.595101118 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	18.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.775779963 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:58.929356098 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	18.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.086363077 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3.3.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.217323065 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4.0.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.387880087 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	18.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.530201912 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	0.23.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.587235928 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.0.12	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.676064968 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.0.12	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.712975979 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	1.0.5	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.780025959 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	1.0.5	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.842062950 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	0.11.10	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.903774023 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	0.11.10	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 12:59:59.962491989 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	15.7.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:00.029608965 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	15.7.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:00.153956890 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4.2.1	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:00.211914062 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.4.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.723175049 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cloudhead.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.723175049 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cloudhead.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.723175049 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cloudhead.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.723175049 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cloudhead.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.723175049 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	cloudhead.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.724934101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.724934101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.724934101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.724934101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.724934101 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.793731928 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	tootallnate.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.793731928 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	tootallnate.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.793731928 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	tootallnate.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.793731928 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	tootallnate.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.793731928 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	tootallnate.net			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.859818935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	luiscouto.pt			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.859818935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	luiscouto.pt			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.859818935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	luiscouto.pt			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.859818935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	luiscouto.pt			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.859818935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	luiscouto.pt			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.859818935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	luiscouto.pt			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.859818935 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	luiscouto.pt			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:04.912470102 CET	1.1.1.1	192.168.2.4	0x4704	No error (0)	eforward1.registrar-servers.com		162.255.118.51	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:06.103354931 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	8.5.22	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.292927027 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3.4.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.477243900 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3.1.74	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.696531057 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	7.2.9	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:06.855206013 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	8.2.11	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.056210041 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	18.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.246150017 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.367964029 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	18.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.435425997 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3.3.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.557687998 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	4.0.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.682271004 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	1.10.295	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.808274984 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.2.15	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:07.871501923 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	0.23.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.363017082 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	thejameskyle.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.363017082 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	thejameskyle.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.363017082 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	thejameskyle.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.363017082 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	thejameskyle.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.363017082 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	thejameskyle.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.363017082 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	thejameskyle.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.363017082 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	thejameskyle.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.443315983 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	vision-media.ca			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.490417004 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.490417004 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.490417004 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.490417004 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.490417004 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.730346918 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.730346918 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.730346918 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.730346918 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.730346918 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:13.978374958 CET	1.1.1.1	192.168.2.4	0xe0e2	No error (0)	mail.reg.ca		66.196.36.12	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:15.916292906 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	8.2.42	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.102771997 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	3.4.2	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.289403915 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	8.5.12	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.479007959 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	7.2.9	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.664668083 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	7.2.9	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:16.852395058 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	18.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.429430008 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	blakeembrey.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.429430008 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	blakeembrey.com			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.434763908 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	sitnik.ru			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.434763908 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	sitnik.ru			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.434763908 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	sitnik.ru			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.434763908 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	sitnik.ru			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.434763908 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	sitnik.ru			MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.500766993 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	18.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.529772997 CET	1.1.1.1	192.168.2.4	0xb18d	No error (0)	mx01.mail.icloud.com		17.57.154.33	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:23.529772997 CET	1.1.1.1	192.168.2.4	0xb18d	No error (0)	mx01.mail.icloud.com		17.42.251.62	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:23.529772997 CET	1.1.1.1	192.168.2.4	0xb18d	No error (0)	mx01.mail.icloud.com		17.57.152.5	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:23.529772997 CET	1.1.1.1	192.168.2.4	0xb18d	No error (0)	mx01.mail.icloud.com		17.56.9.29	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:23.529772997 CET	1.1.1.1	192.168.2.4	0xb18d	No error (0)	mx01.mail.icloud.com		17.57.155.34	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:23.529772997 CET	1.1.1.1	192.168.2.4	0xb18d	No error (0)	mx01.mail.icloud.com		17.57.156.30	A (IP address)	IN (0x0001)	false
Dec 4, 2023 13:00:23.619131088 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.5.3	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.680430889 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	2.5.3	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:23.805989027 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	18.2.0	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:24.002531052 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	8.13.17	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:24.058168888 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	8.6.28	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 4, 2023 13:00:24.120316029 CET	1.1.1.1	192.168.2.4	0x11df	Name error (3)	9.0.6	none	none	MX (Mail exchange)	IN (0x0001)	false

SMTP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP	Commands
Dec 4, 2023 12:56:39.175481081 CET	25	49729	67.195.204.73	192.168.2.4	220 mtaproxy408.free.mail.bf1.yahoo.com ESMTP ready
Dec 4, 2023 12:56:39.176533937 CET	49729	25	192.168.2.4	67.195.204.73	EHLO yahoo.com
Dec 4, 2023 12:56:39.286237955 CET	25	49729	67.195.204.73	192.168.2.4	250-mtaproxy408.free.mail.bf1.yahoo.com 250-PIPELINING 250-SIZE 41943040 250-8BITMIME 250 STARTTLS
Dec 4, 2023 12:56:39.288876057 CET	49729	25	192.168.2.4	67.195.204.73	MAIL FROM: <jfkoofia@yahoo.com>
Dec 4, 2023 12:56:39.399158955 CET	25	49729	67.195.204.73	192.168.2.4	250 sender <jfkoofia@yahoo.com> ok
Dec 4, 2023 12:56:39.401060104 CET	49729	25	192.168.2.4	67.195.204.73	RCPT TO: <jfkoofia@yahoo.com>
Dec 4, 2023 12:56:39.511563063 CET	25	49729	67.195.204.73	192.168.2.4	250 recipient <jfkoofia@yahoo.com> ok
Dec 4, 2023 12:56:39.512382984 CET	49729	25	192.168.2.4	67.195.204.73	DATA
Dec 4, 2023 12:56:39.622129917 CET	25	49729	67.195.204.73	192.168.2.4	354 go ahead
Dec 4, 2023 12:56:41.599993944 CET	49729	25	192.168.2.4	67.195.204.73	1603 sQPsFUbNgjSh235
Dec 4, 2023 12:56:42.095674038 CET	25	49729	67.195.204.73	192.168.2.4	554 5.7.9 Message not accepted for policy reasons. See https://postmaster.yahooinc.com/error-codes
Dec 4, 2023 12:57:09.403122902 CET	25	49736	172.253.115.27	192.168.2.4	220 mx.google.com ESMTP vy11-20020a05620a490b00b0077d6c4bdccbsi8971813qkn.421 - gsmtp
Dec 4, 2023 12:57:09.403768063 CET	25	49738	172.253.115.27	192.168.2.4	220 mx.google.com ESMTP s10-20020a05620a0bca00b0077dc5232909si9606134qki.85 - gsmtp
Dec 4, 2023 12:57:09.403778076 CET	25	49737	172.253.115.27	192.168.2.4	220 mx.google.com ESMTP ou24-20020a05620a621800b0077f0edbec29si1657990qkn.537 - gsmtp
Dec 4, 2023 12:57:09.404798031 CET	49736	25	192.168.2.4	172.253.115.27	EHLO gmail.com
Dec 4, 2023 12:57:09.409427881 CET	25	49739	172.253.115.27	192.168.2.4	220 mx.google.com ESMTP w20-20020a05620a0e9400b0077bd0142498si8823806qkm.756 - gsmtp
Dec 4, 2023 12:57:09.419950962 CET	49738	25	192.168.2.4	172.253.115.27	EHLO gmail.com
Dec 4, 2023 12:57:09.422151089 CET	49737	25	192.168.2.4	172.253.115.27	EHLO gmail.com
Dec 4, 2023 12:57:09.423943996 CET	49739	25	192.168.2.4	172.253.115.27	EHLO gmail.com
Dec 4, 2023 12:57:09.529768944 CET	25	49736	172.253.115.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:57:09.532470942 CET	49736	25	192.168.2.4	172.253.115.27	MAIL FROM: <sdx-cardview-caret-rtl@3x.png>
Dec 4, 2023 12:57:09.537074089 CET	25	49738	172.253.115.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:57:09.539388895 CET	25	49737	172.253.115.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:57:09.540133953 CET	49738	25	192.168.2.4	172.253.115.27	MAIL FROM: <sdx-cardview-backarrow-rtl@2x.png>
Dec 4, 2023 12:57:09.542522907 CET	49737	25	192.168.2.4	172.253.115.27	MAIL FROM: <sdx-cardview-backarrow-rtl-dark@4x.png>
Dec 4, 2023 12:57:09.542678118 CET	25	49739	172.253.115.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:57:09.545432091 CET	49739	25	192.168.2.4	172.253.115.27	MAIL FROM: <sdx-cardview-separator@3x.png>
Dec 4, 2023 12:57:09.641387939 CET	25	49736	172.253.115.27	192.168.2.4	250 2.1.0 OK vy11-20020a05620a490b00b0077d6c4bdccbsi8971813qkn.421 - gsmtp
Dec 4, 2023 12:57:09.642986059 CET	49736	25	192.168.2.4	172.253.115.27	RCPT TO: <kevinmartensson@gmail.com>
Dec 4, 2023 12:57:09.649872065 CET	25	49738	172.253.115.27	192.168.2.4	250 2.1.0 OK s10-20020a05620a0bca00b0077dc5232909si9606134qki.85 - gsmtp
Dec 4, 2023 12:57:09.651273012 CET	49738	25	192.168.2.4	172.253.115.27	RCPT TO: <zertosh@gmail.com>
Dec 4, 2023 12:57:09.652561903 CET	25	49737	172.253.115.27	192.168.2.4	250 2.1.0 OK ou24-20020a05620a621800b0077f0edbec29si1657990qkn.537 - gsmtp
Dec 4, 2023 12:57:09.653894901 CET	49737	25	192.168.2.4	172.253.115.27	RCPT TO: <sindresorhus@gmail.com>
Dec 4, 2023 12:57:09.660744905 CET	25	49739	172.253.115.27	192.168.2.4	250 2.1.0 OK w20-20020a05620a0e9400b0077bd0142498si8823806qkm.756 - gsmtp
Dec 4, 2023 12:57:09.662106991 CET	49739	25	192.168.2.4	172.253.115.27	RCPT TO: <fyzlman@gmail.com>
Dec 4, 2023 12:57:09.787641048 CET	25	49737	172.253.115.27	192.168.2.4	250 2.1.5 OK ou24-20020a05620a621800b0077f0edbec29si1657990qkn.537 - gsmtp
Dec 4, 2023 12:57:09.788943052 CET	49737	25	192.168.2.4	172.253.115.27	DATA
Dec 4, 2023 12:57:09.835818052 CET	25	49736	172.253.115.27	192.168.2.4	250 2.1.5 OK vy11-20020a05620a490b00b0077d6c4bdccbsi8971813qkn.421 - gsmtp
Dec 4, 2023 12:57:09.837755919 CET	49736	25	192.168.2.4	172.253.115.27	DATA
Dec 4, 2023 12:57:09.889794111 CET	25	49738	172.253.115.27	192.168.2.4	250 2.1.5 OK s10-20020a05620a0bca00b0077dc5232909si9606134qki.85 - gsmtp
Dec 4, 2023 12:57:09.891865969 CET	49738	25	192.168.2.4	172.253.115.27	DATA
Dec 4, 2023 12:57:09.897653103 CET	25	49737	172.253.115.27	192.168.2.4	354 Go ahead ou24-20020a05620a621800b0077f0edbec29si1657990qkn.537 - gsmtp
Dec 4, 2023 12:57:09.902781010 CET	25	49739	172.253.115.27	192.168.2.4	250 2.1.5 OK w20-20020a05620a0e9400b0077bd0142498si8823806qkm.756 - gsmtp
Dec 4, 2023 12:57:09.904200077 CET	49739	25	192.168.2.4	172.253.115.27	DATA
Dec 4, 2023 12:57:09.947329998 CET	25	49736	172.253.115.27	192.168.2.4	354 Go ahead vy11-20020a05620a490b00b0077d6c4bdccbsi8971813qkn.421 - gsmtp
Dec 4, 2023 12:57:10.000849009 CET	25	49738	172.253.115.27	192.168.2.4	354 Go ahead s10-20020a05620a0bca00b0077dc5232909si9606134qki.85 - gsmtp
Dec 4, 2023 12:57:10.019728899 CET	25	49739	172.253.115.27	192.168.2.4	354 Go ahead w20-20020a05620a0e9400b0077bd0142498si8823806qkm.756 - gsmtp
Dec 4, 2023 12:57:15.269893885 CET	25	49737	172.253.115.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. ou24-20020a05620a621800b0077f0edbec29si1657990qkn.537 - gsmtp
Dec 4, 2023 12:57:15.270226002 CET	25	49738	172.253.115.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. s10-20020a05620a0bca00b0077dc5232909si9606134qki.85 - gsmtp
Dec 4, 2023 12:57:15.365370035 CET	25	49736	172.253.115.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. vy11-20020a05620a490b00b0077d6c4bdccbsi8971813qkn.421 - gsmtp
Dec 4, 2023 12:57:15.411165953 CET	25	49739	172.253.115.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. w20-20020a05620a0e9400b0077bd0142498si8823806qkm.756 - gsmtp
Dec 4, 2023 12:58:04.390794992 CET	25	49744	185.183.28.235	192.168.2.4	220 mx08-00377f01.pphosted.com ESMTP mfa-m0169133
Dec 4, 2023 12:58:04.392258883 CET	49744	25	192.168.2.4	185.183.28.235	EHLO northcoast.com
Dec 4, 2023 12:58:04.466562033 CET	25	49742	173.228.157.41	192.168.2.4	220 pb-mx22.pobox.com ESMTP Postfix
Dec 4, 2023 12:58:04.468023062 CET	49742	25	192.168.2.4	173.228.157.41	EHLO pobox.com
Dec 4, 2023 12:58:04.577033997 CET	25	49744	185.183.28.235	192.168.2.4	250-mx08-00377f01.pphosted.com Hello [102.165.48.83], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 157286400 250 STARTTLS
Dec 4, 2023 12:58:04.580765963 CET	49744	25	192.168.2.4	185.183.28.235	MAIL FROM: <biljir@pobox.com>
Dec 4, 2023 12:58:04.632286072 CET	25	49742	173.228.157.41	192.168.2.4	250-pb-mx22.pobox.com 250-PIPELINING 250-SIZE 36700160 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250 8BITMIME
Dec 4, 2023 12:58:04.634677887 CET	49742	25	192.168.2.4	173.228.157.41	MAIL FROM: <sdx-cardview-caret-rtl@2x.png>
Dec 4, 2023 12:58:04.769037962 CET	25	49744	185.183.28.235	192.168.2.4	250 2.1.0 Sender ok
Dec 4, 2023 12:58:04.769509077 CET	49744	25	192.168.2.4	185.183.28.235	RCPT TO: <grady@northcoast.com>
Dec 4, 2023 12:58:04.799767971 CET	25	49742	173.228.157.41	192.168.2.4	250 2.1.0 Ok
Dec 4, 2023 12:58:04.800110102 CET	49742	25	192.168.2.4	173.228.157.41	RCPT TO: <biljir@pobox.com>
Dec 4, 2023 12:58:04.962094069 CET	25	49744	185.183.28.235	192.168.2.4	250 2.1.5 Recipient ok
Dec 4, 2023 12:58:04.963985920 CET	49744	25	192.168.2.4	185.183.28.235	DATA
Dec 4, 2023 12:58:05.160917044 CET	25	49744	185.183.28.235	192.168.2.4	354 Enter mail, end with "." on a line by itself
Dec 4, 2023 12:58:05.212249041 CET	25	49742	173.228.157.41	192.168.2.4	450 4.1.8 <sdx-cardview-caret-rtl@2x.png>: Sender address rejected: Domain not found
Dec 4, 2023 12:58:05.247023106 CET	25	49743	51.81.61.70	192.168.2.4	550 5.7.1 Connection refused - ELNK001_105 - https://postmaster-earthlink.vadesecure.com/inbound_error_codes/#_105
Dec 4, 2023 12:58:06.302701950 CET	25	49744	185.183.28.235	192.168.2.4	250 2.0.0 3uqx45uy3u-1 Message accepted for delivery
Dec 4, 2023 12:58:06.303958893 CET	49744	25	192.168.2.4	185.183.28.235	QUIT
Dec 4, 2023 12:58:06.483354092 CET	25	49744	185.183.28.235	192.168.2.4	221 2.0.0 mx08-00377f01.pphosted.com Closing connection
Dec 4, 2023 12:58:10.074791908 CET	25	49747	64.29.151.236	192.168.2.4	220 mail158c40.carrierzone.com ESMTP Sendmail 8.14.9/8.13.1; Mon, 4 Dec 2023 06:58:07 -0500
Dec 4, 2023 12:58:10.077023029 CET	49747	25	192.168.2.4	64.29.151.236	EHLO theriver.com
Dec 4, 2023 12:58:10.244201899 CET	25	49747	64.29.151.236	192.168.2.4	250-mail158c40.carrierzone.com Hello [102.165.48.83], pleased to meet you 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-SIZE 52428800 250-DSN 250-STARTTLS 250-DELIVERBY 250 HELP
Dec 4, 2023 12:58:10.247546911 CET	49747	25	192.168.2.4	64.29.151.236	MAIL FROM: <thegrendel@theriver.com>
Dec 4, 2023 12:58:10.390538931 CET	25	49745	192.254.190.168	192.168.2.4	220-gator3194.hostgator.com ESMTP Exim 4.95 #2 Mon, 04 Dec 2023 05:58:10 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Dec 4, 2023 12:58:10.393624067 CET	49745	25	192.168.2.4	192.254.190.168	EHLO onlineconnections.com.au
Dec 4, 2023 12:58:10.467103958 CET	25	49747	64.29.151.236	192.168.2.4	250 2.1.0 <thegrendel@theriver.com>... Sender ok
Dec 4, 2023 12:58:10.469120026 CET	49747	25	192.168.2.4	64.29.151.236	RCPT TO: <thegrendel@theriver.com>
Dec 4, 2023 12:58:10.574157953 CET	25	49745	192.254.190.168	192.168.2.4	250-gator3194.hostgator.com Hello onlineconnections.com.au [102.165.48.83] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPE_CONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Dec 4, 2023 12:58:10.577294111 CET	49745	25	192.168.2.4	192.254.190.168	MAIL FROM: <sdx-cardview-caret-rtl@4x.png>
Dec 4, 2023 12:58:10.633285999 CET	25	49747	64.29.151.236	192.168.2.4	550 5.1.1 <thegrendel@theriver.com>... User unknown
Dec 4, 2023 12:58:10.758744955 CET	25	49745	192.254.190.168	192.168.2.4	250 OK
Dec 4, 2023 12:58:10.759236097 CET	49745	25	192.168.2.4	192.254.190.168	RCPT TO: <audictionary@onlineconnections.com.au>
Dec 4, 2023 12:58:13.386580944 CET	25	49746	131.111.8.146	192.168.2.4	220 ppsw-30.srv.uis.cam.ac.uk (mx.cam.ac.uk [131.111.8.146]:25) ESMTP Exim 4.96.2-0 Mon, 04 Dec 2023 11:58:13 +0000
Dec 4, 2023 12:58:13.389178991 CET	49746	25	192.168.2.4	131.111.8.146	EHLO cl.cam.ac.uk
Dec 4, 2023 12:58:16.033025026 CET	25	49745	192.254.190.168	192.168.2.4	550 No Such User Here"
Dec 4, 2023 12:58:16.213825941 CET	25	49745	192.254.190.168	192.168.2.4	421 gator3194.hostgator.com lost input connection
Dec 4, 2023 12:58:18.567420006 CET	25	49746	131.111.8.146	192.168.2.4	250-ppsw-30.srv.uis.cam.ac.uk Hello cl.cam.ac.uk [102.165.48.83] 250-SIZE 104857600 250-8BITMIME 250-VRFY 250-PIPELINING 250-PIPECONNECT 250-STARTTLS 250 HELP
Dec 4, 2023 12:58:18.569988012 CET	49746	25	192.168.2.4	131.111.8.146	MAIL FROM: <sdx-cardview-caret-rtl@3x.png>
Dec 4, 2023 12:58:23.750859022 CET	25	49746	131.111.8.146	192.168.2.4	250 OK
Dec 4, 2023 12:58:23.751194954 CET	49746	25	192.168.2.4	131.111.8.146	RCPT TO: <brian.kelk@cl.cam.ac.uk>
Dec 4, 2023 12:58:23.927007914 CET	25	49746	131.111.8.146	192.168.2.4	550 Please use your name when saying HELO (not cl.cam.ac.uk)
Dec 4, 2023 12:58:24.103753090 CET	25	49746	131.111.8.146	192.168.2.4	421 ppsw-30.srv.uis.cam.ac.uk lost input connection
Dec 4, 2023 12:59:07.411947012 CET	25	49749	104.47.66.10	192.168.2.4	220 MW2NAM12FT017.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Mon, 4 Dec 2023 11:59:06 +0000
Dec 4, 2023 12:59:07.413867950 CET	49749	25	192.168.2.4	104.47.66.10	EHLO alumni.caltech.edu
Dec 4, 2023 12:59:07.580202103 CET	25	49749	104.47.66.10	192.168.2.4	250-MW2NAM12FT017.mail.protection.outlook.com Hello [102.165.48.83] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:07.587976933 CET	49749	25	192.168.2.4	104.47.66.10	MAIL FROM: <sdx-cardview-caret-rtl@4x.png>
Dec 4, 2023 12:59:07.646557093 CET	25	49748	85.187.148.2	192.168.2.4	220-az1-ss24.a2hosting.com ESMTP Exim 4.96.2 #2 Mon, 04 Dec 2023 04:59:07 -0700 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Dec 4, 2023 12:59:07.649844885 CET	49748	25	192.168.2.4	85.187.148.2	EHLO gzip.org
Dec 4, 2023 12:59:07.798666000 CET	25	49748	85.187.148.2	192.168.2.4	250-az1-ss24.a2hosting.com Hello gzip.org [102.165.48.83] 250-SIZE 78643200 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Dec 4, 2023 12:59:07.801441908 CET	49748	25	192.168.2.4	85.187.148.2	MAIL FROM: <freetype@nongnu.org>
Dec 4, 2023 12:59:07.828432083 CET	25	49749	104.47.66.10	192.168.2.4	250 2.1.0 Sender OK
Dec 4, 2023 12:59:07.828876972 CET	49749	25	192.168.2.4	104.47.66.10	RCPT TO: <madler@alumni.caltech.edu>
Dec 4, 2023 12:59:07.949742079 CET	25	49748	85.187.148.2	192.168.2.4	250 OK
Dec 4, 2023 12:59:07.950628996 CET	49748	25	192.168.2.4	85.187.148.2	RCPT TO: <jloup@gzip.org>
Dec 4, 2023 12:59:08.031688929 CET	25	49749	104.47.66.10	192.168.2.4	550 5.7.606 Access denied, banned sending IP [102.165.48.83]. To request removal from this list please visit https://sender.office.com/ and follow the directions. For more information please go to http://go.microsoft.com/fwlink/?LinkID=526655 AS(1427) [MW2NAM12FT017.eop-nam12.prod.protection.outlook.com 2023-12-04T11:59:07.930Z 08DBF1D6B4D05A51]
Dec 4, 2023 12:59:08.261878967 CET	25	49748	85.187.148.2	192.168.2.4	250 Accepted
Dec 4, 2023 12:59:08.262386084 CET	49748	25	192.168.2.4	85.187.148.2	DATA
Dec 4, 2023 12:59:08.410420895 CET	25	49748	85.187.148.2	192.168.2.4	354 Enter message, ending with "." on a line by itself
Dec 4, 2023 12:59:08.904768944 CET	25	49750	209.51.188.92	192.168.2.4	220 eggs.gnu.org ESMTP Exim 4.90_1 Ubuntu Mon, 04 Dec 2023 06:59:08 -0500
Dec 4, 2023 12:59:08.906450033 CET	49750	25	192.168.2.4	209.51.188.92	EHLO nongnu.org
Dec 4, 2023 12:59:08.937808037 CET	25	49751	209.51.188.92	192.168.2.4	220 eggs.gnu.org ESMTP Exim 4.90_1 Ubuntu Mon, 04 Dec 2023 06:59:08 -0500
Dec 4, 2023 12:59:08.938978910 CET	49751	25	192.168.2.4	209.51.188.92	EHLO nongnu.org
Dec 4, 2023 12:59:09.014094114 CET	25	49750	209.51.188.92	192.168.2.4	250-eggs.gnu.org Hello nongnu.org [102.165.48.83] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-STARTTLS 250-PRDR 250 HELP
Dec 4, 2023 12:59:09.022089005 CET	49750	25	192.168.2.4	209.51.188.92	MAIL FROM: <greg@kinoho.net>
Dec 4, 2023 12:59:09.050534964 CET	25	49751	209.51.188.92	192.168.2.4	250-eggs.gnu.org Hello nongnu.org [102.165.48.83] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-STARTTLS 250-PRDR 250 HELP
Dec 4, 2023 12:59:09.056291103 CET	49751	25	192.168.2.4	209.51.188.92	MAIL FROM: <sdx-cardview-backarrow@4x.png>
Dec 4, 2023 12:59:09.128688097 CET	25	49750	209.51.188.92	192.168.2.4	250 OK
Dec 4, 2023 12:59:09.129240036 CET	49750	25	192.168.2.4	209.51.188.92	RCPT TO: <freetype@nongnu.org>
Dec 4, 2023 12:59:09.267806053 CET	25	49751	209.51.188.92	192.168.2.4	250 OK
Dec 4, 2023 12:59:09.268045902 CET	49751	25	192.168.2.4	209.51.188.92	RCPT TO: <freetype-devel@nongnu.org>
Dec 4, 2023 12:59:09.463277102 CET	25	49750	209.51.188.92	192.168.2.4	250 OK
Dec 4, 2023 12:59:09.514920950 CET	49750	25	192.168.2.4	209.51.188.92	RCPT TO: <freetype@nongnu.org>
Dec 4, 2023 12:59:09.720871925 CET	25	49751	209.51.188.92	192.168.2.4	451-You seem to be a Windows machine. Our condolences. Come back later. You are 451-greylisted for 20 minutes. See http://www.fsf.org/about/systems/greylisting 451 for more information.
Dec 4, 2023 12:59:09.831780910 CET	25	49751	209.51.188.92	192.168.2.4	421 eggs.gnu.org lost input connection
Dec 4, 2023 12:59:10.244328022 CET	25	49748	85.187.148.2	192.168.2.4	550-This message contains a virus or other harmful content 550 (Win.Worm.SomeFool-31)
Dec 4, 2023 12:59:10.284887075 CET	25	49750	209.51.188.92	192.168.2.4	451-You seem to be a Windows machine. Our condolences. Come back later. You are 451-greylisted for 20 minutes. See http://www.fsf.org/about/systems/greylisting 451 for more information.
Dec 4, 2023 12:59:10.396863937 CET	25	49748	85.187.148.2	192.168.2.4	421 az1-ss24.a2hosting.com lost input connection
Dec 4, 2023 12:59:10.398962975 CET	25	49750	209.51.188.92	192.168.2.4	421 eggs.gnu.org lost input connection
Dec 4, 2023 12:59:11.171377897 CET	25	49752	142.251.167.26	192.168.2.4	220 mx.google.com ESMTP n5-20020a0cec45000000b0067aa80f3cb7si5068157qvq.523 - gsmtp
Dec 4, 2023 12:59:11.172774076 CET	49752	25	192.168.2.4	142.251.167.26	EHLO kinoho.net
Dec 4, 2023 12:59:11.306829929 CET	25	49752	142.251.167.26	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:11.309509993 CET	49752	25	192.168.2.4	142.251.167.26	MAIL FROM: <sdx-cardview-separator@2x.png>
Dec 4, 2023 12:59:11.441735029 CET	25	49752	142.251.167.26	192.168.2.4	250 2.1.0 OK n5-20020a0cec45000000b0067aa80f3cb7si5068157qvq.523 - gsmtp
Dec 4, 2023 12:59:11.444025993 CET	49752	25	192.168.2.4	142.251.167.26	RCPT TO: <greg@kinoho.net>
Dec 4, 2023 12:59:11.597873926 CET	25	49752	142.251.167.26	192.168.2.4	250 2.1.5 OK n5-20020a0cec45000000b0067aa80f3cb7si5068157qvq.523 - gsmtp
Dec 4, 2023 12:59:11.599112988 CET	49752	25	192.168.2.4	142.251.167.26	DATA
Dec 4, 2023 12:59:11.734690905 CET	25	49752	142.251.167.26	192.168.2.4	354 Go ahead n5-20020a0cec45000000b0067aa80f3cb7si5068157qvq.523 - gsmtp
Dec 4, 2023 12:59:12.964165926 CET	25	49752	142.251.167.26	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. n5-20020a0cec45000000b0067aa80f3cb7si5068157qvq.523 - gsmtp
Dec 4, 2023 12:59:47.584815979 CET	25	49753	142.251.16.27	192.168.2.4	220 mx.google.com ESMTP bz22-20020a05622a1e9600b0041985eb503csi9466275qtb.693 - gsmtp
Dec 4, 2023 12:59:47.587438107 CET	49753	25	192.168.2.4	142.251.16.27	EHLO gmail.com
Dec 4, 2023 12:59:47.589729071 CET	25	49754	142.251.16.27	192.168.2.4	220 mx.google.com ESMTP ay18-20020a05622a229200b00423a394ff59si9707179qtb.677 - gsmtp
Dec 4, 2023 12:59:47.591233015 CET	49754	25	192.168.2.4	142.251.16.27	EHLO gmail.com
Dec 4, 2023 12:59:47.664602041 CET	25	49755	142.251.16.27	192.168.2.4	220 mx.google.com ESMTP t16-20020a0cef10000000b0067a9b65fe58si6831745qvr.138 - gsmtp
Dec 4, 2023 12:59:47.666456938 CET	49755	25	192.168.2.4	142.251.16.27	EHLO gmail.com
Dec 4, 2023 12:59:47.698360920 CET	25	49753	142.251.16.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:47.701301098 CET	49753	25	192.168.2.4	142.251.16.27	MAIL FROM: <hoist-non-react-statics@3.3.2>
Dec 4, 2023 12:59:47.705784082 CET	25	49754	142.251.16.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:47.708878994 CET	49754	25	192.168.2.4	142.251.16.27	MAIL FROM: <sdx-cardview-separator@2x.png>
Dec 4, 2023 12:59:47.779486895 CET	25	49755	142.251.16.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:47.783416033 CET	49755	25	192.168.2.4	142.251.16.27	MAIL FROM: <merge-styles@8.5.12>
Dec 4, 2023 12:59:47.808543921 CET	25	49753	142.251.16.27	192.168.2.4	250 2.1.0 OK bz22-20020a05622a1e9600b0041985eb503csi9466275qtb.693 - gsmtp
Dec 4, 2023 12:59:47.812552929 CET	49753	25	192.168.2.4	142.251.16.27	RCPT TO: <heineiuo@gmail.com>
Dec 4, 2023 12:59:47.820899010 CET	25	49754	142.251.16.27	192.168.2.4	250 2.1.0 OK ay18-20020a05622a229200b00423a394ff59si9707179qtb.677 - gsmtp
Dec 4, 2023 12:59:47.823553085 CET	49754	25	192.168.2.4	142.251.16.27	RCPT TO: <sam.verschueren@gmail.com>
Dec 4, 2023 12:59:47.840111971 CET	25	49756	52.101.73.10	192.168.2.4	220 AM3PEPF0000A790.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Mon, 4 Dec 2023 11:59:47 +0000
Dec 4, 2023 12:59:47.842324018 CET	49756	25	192.168.2.4	52.101.73.10	EHLO outlook.com
Dec 4, 2023 12:59:47.891308069 CET	25	49755	142.251.16.27	192.168.2.4	250 2.1.0 OK t16-20020a0cef10000000b0067a9b65fe58si6831745qvr.138 - gsmtp
Dec 4, 2023 12:59:47.892502069 CET	49755	25	192.168.2.4	142.251.16.27	RCPT TO: <shtylman@gmail.com>
Dec 4, 2023 12:59:47.969553947 CET	25	49754	142.251.16.27	192.168.2.4	250 2.1.5 OK ay18-20020a05622a229200b00423a394ff59si9707179qtb.677 - gsmtp
Dec 4, 2023 12:59:47.970973969 CET	49754	25	192.168.2.4	142.251.16.27	DATA
Dec 4, 2023 12:59:48.021693945 CET	25	49756	52.101.73.10	192.168.2.4	250-AM3PEPF0000A790.mail.protection.outlook.com Hello [102.165.48.83] 250-SIZE 49283072 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:48.025507927 CET	49756	25	192.168.2.4	52.101.73.10	MAIL FROM: <sdx-cardview-backarrow-dark@4x.png>
Dec 4, 2023 12:59:48.062076092 CET	25	49753	142.251.16.27	192.168.2.4	250 2.1.5 OK bz22-20020a05622a1e9600b0041985eb503csi9466275qtb.693 - gsmtp
Dec 4, 2023 12:59:48.063544035 CET	49753	25	192.168.2.4	142.251.16.27	DATA
Dec 4, 2023 12:59:48.083276033 CET	25	49754	142.251.16.27	192.168.2.4	354 Go ahead ay18-20020a05622a229200b00423a394ff59si9707179qtb.677 - gsmtp
Dec 4, 2023 12:59:48.124229908 CET	25	49755	142.251.16.27	192.168.2.4	250 2.1.5 OK t16-20020a0cef10000000b0067a9b65fe58si6831745qvr.138 - gsmtp
Dec 4, 2023 12:59:48.130999088 CET	49755	25	192.168.2.4	142.251.16.27	DATA
Dec 4, 2023 12:59:48.171211004 CET	25	49753	142.251.16.27	192.168.2.4	354 Go ahead bz22-20020a05622a1e9600b0041985eb503csi9466275qtb.693 - gsmtp
Dec 4, 2023 12:59:48.205054045 CET	25	49756	52.101.73.10	192.168.2.4	550 5.7.1 Service unavailable, Client host [102.165.48.83] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.165.48.83 (AS3130). [AM3PEPF0000A790.eurprd04.prod.outlook.com 2023-12-04T11:59:48.097Z 08DBF2DCDFE412AB]
Dec 4, 2023 12:59:48.238488913 CET	25	49755	142.251.16.27	192.168.2.4	354 Go ahead t16-20020a0cef10000000b0067a9b65fe58si6831745qvr.138 - gsmtp
Dec 4, 2023 12:59:48.532901049 CET	49754	25	192.168.2.4	142.251.16.27	56233xFPJU7UXpNYdjQEi204ZmUXFRS2fqRkEh13t Lt/Jv4xRU763S7aE1y0l3jdecB6BNIFK/jmgTLf+jFad4sYWvoWcvM1a5WIhvrlnH9UUIk8C 0AsgV7aGF
Dec 4, 2023 12:59:48.618958950 CET	25	49757	142.251.16.27	192.168.2.4	220 mx.google.com ESMTP x9-20020a05620a258900b0077dc4c03144si9873936qko.37 - gsmtp
Dec 4, 2023 12:59:48.624104977 CET	49757	25	192.168.2.4	142.251.16.27	EHLO gmail.com
Dec 4, 2023 12:59:48.735157967 CET	25	49757	142.251.16.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:48.750746965 CET	49757	25	192.168.2.4	142.251.16.27	MAIL FROM: <react-focus@8.8.29>
Dec 4, 2023 12:59:48.858560085 CET	25	49757	142.251.16.27	192.168.2.4	250 2.1.0 OK x9-20020a05620a258900b0077dc4c03144si9873936qko.37 - gsmtp
Dec 4, 2023 12:59:48.866004944 CET	49757	25	192.168.2.4	142.251.16.27	RCPT TO: <purecatamphetamine@gmail.com>
Dec 4, 2023 12:59:49.174068928 CET	25	49757	142.251.16.27	192.168.2.4	250 2.1.5 OK x9-20020a05620a258900b0077dc4c03144si9873936qko.37 - gsmtp
Dec 4, 2023 12:59:49.182020903 CET	49757	25	192.168.2.4	142.251.16.27	DATA
Dec 4, 2023 12:59:49.289752960 CET	25	49757	142.251.16.27	192.168.2.4	354 Go ahead x9-20020a05620a258900b0077dc4c03144si9873936qko.37 - gsmtp
Dec 4, 2023 12:59:51.473103046 CET	25	49754	142.251.16.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. ay18-20020a05622a229200b00423a394ff59si9707179qtb.677 - gsmtp
Dec 4, 2023 12:59:51.745971918 CET	25	49755	142.251.16.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. t16-20020a0cef10000000b0067a9b65fe58si6831745qvr.138 - gsmtp
Dec 4, 2023 12:59:51.750886917 CET	25	49753	142.251.16.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. bz22-20020a05622a1e9600b0041985eb503csi9466275qtb.693 - gsmtp
Dec 4, 2023 12:59:52.123889923 CET	25	49757	142.251.16.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. x9-20020a05620a258900b0077dc4c03144si9873936qko.37 - gsmtp
Dec 4, 2023 12:59:56.198801994 CET	25	49758	142.251.16.27	192.168.2.4	220 mx.google.com ESMTP b16-20020a05620a04f000b0077f03b587d5si3926262qkh.533 - gsmtp
Dec 4, 2023 12:59:56.201497078 CET	49758	25	192.168.2.4	142.251.16.27	EHLO gmail.com
Dec 4, 2023 12:59:56.239578009 CET	25	49759	142.251.16.27	192.168.2.4	220 mx.google.com ESMTP ee26-20020a05620a801a00b0076f18ad2e65si10110067qkb.520 - gsmtp
Dec 4, 2023 12:59:56.241192102 CET	49759	25	192.168.2.4	142.251.16.27	EHLO gmail.com
Dec 4, 2023 12:59:56.318008900 CET	25	49758	142.251.16.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:56.322616100 CET	49758	25	192.168.2.4	142.251.16.27	MAIL FROM: <sdx-cardview-caret-rtl@2x.png>
Dec 4, 2023 12:59:56.351619005 CET	25	49759	142.251.16.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:56.354509115 CET	49759	25	192.168.2.4	142.251.16.27	MAIL FROM: <freetype@nongnu.org>
Dec 4, 2023 12:59:56.364473104 CET	25	49760	142.251.167.26	192.168.2.4	220 mx.google.com ESMTP t14-20020a056214154e00b0067a98bd3e78si7179389qvw.610 - gsmtp
Dec 4, 2023 12:59:56.366926908 CET	49760	25	192.168.2.4	142.251.167.26	EHLO cryptsoft.com
Dec 4, 2023 12:59:56.435753107 CET	25	49758	142.251.16.27	192.168.2.4	250 2.1.0 OK b16-20020a05620a04f000b0077f03b587d5si3926262qkh.533 - gsmtp
Dec 4, 2023 12:59:56.437804937 CET	49758	25	192.168.2.4	142.251.16.27	RCPT TO: <zalmoxisus@gmail.com>
Dec 4, 2023 12:59:56.446549892 CET	25	49761	142.251.167.26	192.168.2.4	220 mx.google.com ESMTP v19-20020a05622a189300b004237b45a899si10143358qtc.383 - gsmtp
Dec 4, 2023 12:59:56.449822903 CET	49761	25	192.168.2.4	142.251.167.26	EHLO cryptsoft.com
Dec 4, 2023 12:59:56.463989019 CET	25	49759	142.251.16.27	192.168.2.4	250 2.1.0 OK ee26-20020a05620a801a00b0076f18ad2e65si10110067qkb.520 - gsmtp
Dec 4, 2023 12:59:56.466202021 CET	49759	25	192.168.2.4	142.251.16.27	RCPT TO: <cohara87@gmail.com>
Dec 4, 2023 12:59:56.506169081 CET	25	49760	142.251.167.26	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:56.509021997 CET	49760	25	192.168.2.4	142.251.167.26	MAIL FROM: <sdx-cardview-backarrow@3x.png>
Dec 4, 2023 12:59:56.586384058 CET	25	49761	142.251.167.26	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 12:59:56.590786934 CET	49761	25	192.168.2.4	142.251.167.26	MAIL FROM: <ifaaan@gmail.com>
Dec 4, 2023 12:59:56.639188051 CET	25	49759	142.251.16.27	192.168.2.4	250 2.1.5 OK ee26-20020a05620a801a00b0076f18ad2e65si10110067qkb.520 - gsmtp
Dec 4, 2023 12:59:56.641617060 CET	49759	25	192.168.2.4	142.251.16.27	DATA
Dec 4, 2023 12:59:56.646032095 CET	25	49760	142.251.167.26	192.168.2.4	250 2.1.0 OK t14-20020a056214154e00b0067a98bd3e78si7179389qvw.610 - gsmtp
Dec 4, 2023 12:59:56.647483110 CET	49760	25	192.168.2.4	142.251.167.26	RCPT TO: <eay@cryptsoft.com>
Dec 4, 2023 12:59:56.676078081 CET	25	49758	142.251.16.27	192.168.2.4	250 2.1.5 OK b16-20020a05620a04f000b0077f03b587d5si3926262qkh.533 - gsmtp
Dec 4, 2023 12:59:56.680376053 CET	49758	25	192.168.2.4	142.251.16.27	DATA
Dec 4, 2023 12:59:56.725625992 CET	25	49761	142.251.167.26	192.168.2.4	250 2.1.0 OK v19-20020a05622a189300b004237b45a899si10143358qtc.383 - gsmtp
Dec 4, 2023 12:59:56.729404926 CET	49761	25	192.168.2.4	142.251.167.26	RCPT TO: <tjh@cryptsoft.com>
Dec 4, 2023 12:59:56.749362946 CET	25	49759	142.251.16.27	192.168.2.4	354 Go ahead ee26-20020a05620a801a00b0076f18ad2e65si10110067qkb.520 - gsmtp
Dec 4, 2023 12:59:56.793440104 CET	25	49758	142.251.16.27	192.168.2.4	354 Go ahead b16-20020a05620a04f000b0077f03b587d5si3926262qkh.533 - gsmtp
Dec 4, 2023 12:59:56.806639910 CET	25	49760	142.251.167.26	192.168.2.4	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser t14-20020a056214154e00b0067a98bd3e78si7179389qvw.610 - gsmtp
Dec 4, 2023 12:59:56.909638882 CET	25	49761	142.251.167.26	192.168.2.4	250 2.1.5 OK v19-20020a05622a189300b004237b45a899si10143358qtc.383 - gsmtp
Dec 4, 2023 12:59:56.919334888 CET	49761	25	192.168.2.4	142.251.167.26	DATA
Dec 4, 2023 12:59:57.055186987 CET	25	49761	142.251.167.26	192.168.2.4	354 Go ahead v19-20020a05622a189300b004237b45a899si10143358qtc.383 - gsmtp
Dec 4, 2023 12:59:57.162455082 CET	49759	25	192.168.2.4	142.251.16.27	9454S7U4qhd02tswVOhJTdKh3rLCCVoZFirMm36m2g1EHzVokS9NBpqYyHOf5lR+W1 EVRqF30RGqdjxkzgOZaEu4/Td4KcqQcULjZm94BMT5sW1whD6F1sqhBasgiHjf+Jb2Xtqai5 9hTlbvdXcUnJ3piUkP8qbIZ2/IS0Av25ymKmI3k6PKkpMGRehCnpJ3dkdTe6l6yupRA8sxkW CSm+8xeyP31KqisRUpqpcnBHypbvRWNAxYxCsNiQi8VoxYu3XStxo2q4CK39J8ksTFW/qPqm 7IK/Be8VrjUCcsDEQyl/vmxEnVQMmulQSAolYHeRcv7CGAt5AvrfJXUEvQgOKfuDeYQK9oQY GvxhmrPoJhKZECvDiyDfeaMaj108lICPCynBBifAM88CU8y0Yfde5B+4CPlP11m26lchekOJ Q7oNqqrvAE6nw6nk2NjAey78UqsJ+O6v3W9tfswv8UqIaj/8+u5lwmtZfrdcbpKlK3qEt4t2 DrKhxEGsrqz6naiKwGmxQ8DihByg28sL6hUuFkf9VMzlBvSemJxixE8FJg2I7nR2KooA+HsV 9TQW9zMFH/TkOG71jIroYnUHAGqw4aHEV4zamtVJ2yTTyJbhBS7Gcf8XqL9X5JDGuTz1oJBS jjov2iQYRS7kp8yInZfg3YKOQAc57ccdJ1QbjJBZCIie9UST8iGYdtkAhRTNA8YZGAjzLkT4 IyL9IBHyLQiHWoSEQlch8WwQ7nGI63ZE0EsixVh3pKY2iUasq8K6Ssar2pPOM314OvtdOpjp RQdJ6y8RPFWighCZ3SkDvDgt3oWMrtCEyMu/KXSIyLuHMH0K+gMG06gV7zV+Us8GmDr9Vl86 z0XLxBBmx8eaVSMSscEkdwRwBHMAjIII/mPazIDNhTG5B
Dec 4, 2023 12:59:59.390388966 CET	25	49758	142.251.16.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. b16-20020a05620a04f000b0077f03b587d5si3926262qkh.533 - gsmtp
Dec 4, 2023 12:59:59.463430882 CET	25	49759	142.251.16.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. ee26-20020a05620a801a00b0076f18ad2e65si10110067qkb.520 - gsmtp
Dec 4, 2023 12:59:59.597615957 CET	25	49761	142.251.167.26	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. v19-20020a05622a189300b004237b45a899si10143358qtc.383 - gsmtp
Dec 4, 2023 13:00:04.972332001 CET	25	49762	142.251.16.27	192.168.2.4	220 mx.google.com ESMTP o19-20020a05620a2a1300b0077da5e2ff28si10015239qkp.289 - gsmtp
Dec 4, 2023 13:00:04.972560883 CET	49762	25	192.168.2.4	142.251.16.27	EHLO gmail.com
Dec 4, 2023 13:00:05.059911013 CET	25	49763	142.251.167.26	192.168.2.4	220 mx.google.com ESMTP y14-20020a0cec0e000000b0067aa7622a49si5395711qvo.603 - gsmtp
Dec 4, 2023 13:00:05.060154915 CET	49763	25	192.168.2.4	142.251.167.26	EHLO tootallnate.net
Dec 4, 2023 13:00:05.088624001 CET	25	49762	142.251.16.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 13:00:05.088941097 CET	49762	25	192.168.2.4	142.251.16.27	MAIL FROM: <purecatamphetamine@gmail.com>
Dec 4, 2023 13:00:05.138423920 CET	25	49764	142.251.167.26	192.168.2.4	220 mx.google.com ESMTP q5-20020a05621419e500b0067abc8d7e5fsi3258151qvc.221 - gsmtp
Dec 4, 2023 13:00:05.138652086 CET	49764	25	192.168.2.4	142.251.167.26	EHLO luiscouto.pt
Dec 4, 2023 13:00:05.206497908 CET	25	49762	142.251.16.27	192.168.2.4	250 2.1.0 OK o19-20020a05620a2a1300b0077da5e2ff28si10015239qkp.289 - gsmtp
Dec 4, 2023 13:00:05.206712008 CET	49762	25	192.168.2.4	142.251.16.27	RCPT TO: <sebmck@gmail.com>
Dec 4, 2023 13:00:05.254374981 CET	25	49765	162.255.118.51	192.168.2.4	220-asp-relay.et.namecheap.tech ESMTP Postfix
Dec 4, 2023 13:00:05.545665979 CET	25	49762	142.251.16.27	192.168.2.4	250 2.1.5 OK o19-20020a05620a2a1300b0077da5e2ff28si10015239qkp.289 - gsmtp
Dec 4, 2023 13:00:05.547851086 CET	49762	25	192.168.2.4	142.251.16.27	DATA
Dec 4, 2023 13:00:05.665740967 CET	25	49762	142.251.16.27	192.168.2.4	354 Go ahead o19-20020a05620a2a1300b0077da5e2ff28si10015239qkp.289 - gsmtp
Dec 4, 2023 13:00:05.938028097 CET	25	49762	142.251.16.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. o19-20020a05620a2a1300b0077da5e2ff28si10015239qkp.289 - gsmtp
Dec 4, 2023 13:00:06.190577984 CET	25	49763	142.251.167.26	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 13:00:06.191442013 CET	49763	25	192.168.2.4	142.251.167.26	MAIL FROM: <tjh@cryptsoft.com>
Dec 4, 2023 13:00:06.268693924 CET	25	49764	142.251.167.26	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 13:00:06.269009113 CET	49764	25	192.168.2.4	142.251.167.26	MAIL FROM: <npm/prop-types@15.7.2>
Dec 4, 2023 13:00:06.321391106 CET	25	49763	142.251.167.26	192.168.2.4	250 2.1.0 OK y14-20020a0cec0e000000b0067aa7622a49si5395711qvo.603 - gsmtp
Dec 4, 2023 13:00:06.321599007 CET	49763	25	192.168.2.4	142.251.167.26	RCPT TO: <nathan@tootallnate.net>
Dec 4, 2023 13:00:06.398613930 CET	25	49764	142.251.167.26	192.168.2.4	250 2.1.0 OK q5-20020a05621419e500b0067abc8d7e5fsi3258151qvc.221 - gsmtp
Dec 4, 2023 13:00:06.398808956 CET	49764	25	192.168.2.4	142.251.167.26	RCPT TO: <hello@luiscouto.pt>
Dec 4, 2023 13:00:06.578844070 CET	25	49763	142.251.167.26	192.168.2.4	250 2.1.5 OK y14-20020a0cec0e000000b0067aa7622a49si5395711qvo.603 - gsmtp
Dec 4, 2023 13:00:06.579165936 CET	49763	25	192.168.2.4	142.251.167.26	DATA
Dec 4, 2023 13:00:06.679722071 CET	25	49764	142.251.167.26	192.168.2.4	250 2.1.5 OK q5-20020a05621419e500b0067abc8d7e5fsi3258151qvc.221 - gsmtp
Dec 4, 2023 13:00:06.682684898 CET	49764	25	192.168.2.4	142.251.167.26	DATA
Dec 4, 2023 13:00:06.709523916 CET	25	49763	142.251.167.26	192.168.2.4	354 Go ahead y14-20020a0cec0e000000b0067aa7622a49si5395711qvo.603 - gsmtp
Dec 4, 2023 13:00:06.812005997 CET	25	49764	142.251.167.26	192.168.2.4	354 Go ahead q5-20020a05621419e500b0067abc8d7e5fsi3258151qvc.221 - gsmtp
Dec 4, 2023 13:00:07.176740885 CET	25	49764	142.251.167.26	192.168.2.4	550-5.7.1 [102.165.48.83] Gmail has detected that this message is not RFC 5322 550-5.7.1 compliant: 550-5.7.1 'From' header has non compliant domain name. 550-5.7.1 To reduce the amount of spam sent to Gmail, this message has been 550-5.7.1 blocked. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. q5-20020a05621419e500b0067abc8d7e5fsi3258151qvc.221 - gsmtp
Dec 4, 2023 13:00:07.274255037 CET	25	49763	142.251.167.26	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. y14-20020a0cec0e000000b0067aa7622a49si5395711qvo.603 - gsmtp
Dec 4, 2023 13:00:08.149826050 CET	25	49765	162.255.118.51	192.168.2.4	220 asp-relay.et.namecheap.tech ESMTP Postfix
Dec 4, 2023 13:00:08.150037050 CET	49765	25	192.168.2.4	162.255.118.51	EHLO cloudhead.net
Dec 4, 2023 13:00:08.317850113 CET	25	49765	162.255.118.51	192.168.2.4	250-asp-relay.et.namecheap.tech 250-PIPELINING 250-SIZE 20971520 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 CHUNKING
Dec 4, 2023 13:00:08.318186998 CET	49765	25	192.168.2.4	162.255.118.51	MAIL FROM: <sdx-cardview-overflow-dark@4x.png>
Dec 4, 2023 13:00:08.487663984 CET	25	49765	162.255.118.51	192.168.2.4	250 2.1.0 Ok
Dec 4, 2023 13:00:08.487778902 CET	49765	25	192.168.2.4	162.255.118.51	RCPT TO: <self@cloudhead.net>
Dec 4, 2023 13:00:08.710100889 CET	25	49765	162.255.118.51	192.168.2.4	554 5.1.8 <sdx-cardview-overflow-dark@4x.png>: Sender address rejected: Domain not found
Dec 4, 2023 13:00:13.647171974 CET	25	49766	142.251.167.26	192.168.2.4	220 mx.google.com ESMTP gi4-20020a056214248400b0067ac4b8a125si2628884qvb.39 - gsmtp
Dec 4, 2023 13:00:13.652316093 CET	49766	25	192.168.2.4	142.251.167.26	EHLO thejameskyle.com
Dec 4, 2023 13:00:13.833717108 CET	25	49766	142.251.167.26	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 13:00:13.834455013 CET	49766	25	192.168.2.4	142.251.167.26	MAIL FROM: <hoist-non-react-statics@3.3.2>
Dec 4, 2023 13:00:13.837546110 CET	25	49767	142.251.16.27	192.168.2.4	220 mx.google.com ESMTP fe15-20020a05622a4d4f00b004254a3cdd6dsi4358025qtb.234 - gsmtp
Dec 4, 2023 13:00:13.838408947 CET	49767	25	192.168.2.4	142.251.16.27	EHLO gmail.com
Dec 4, 2023 13:00:13.948767900 CET	25	49767	142.251.16.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 13:00:13.953980923 CET	25	49768	142.251.16.27	192.168.2.4	220 mx.google.com ESMTP i21-20020a05620a145500b0077d7d37d036si8779639qkl.687 - gsmtp
Dec 4, 2023 13:00:13.964297056 CET	25	49766	142.251.167.26	192.168.2.4	250 2.1.0 OK gi4-20020a056214248400b0067ac4b8a125si2628884qvb.39 - gsmtp
Dec 4, 2023 13:00:14.947715998 CET	49768	25	192.168.2.4	142.251.16.27	EHLO gmail.com
Dec 4, 2023 13:00:14.947719097 CET	49767	25	192.168.2.4	142.251.16.27	MAIL FROM: <sdx-cardview-caret@2x.png>
Dec 4, 2023 13:00:14.947865009 CET	49766	25	192.168.2.4	142.251.167.26	RCPT TO: <me@thejameskyle.com>
Dec 4, 2023 13:00:15.055351019 CET	25	49767	142.251.16.27	192.168.2.4	250 2.1.0 OK fe15-20020a05622a4d4f00b004254a3cdd6dsi4358025qtb.234 - gsmtp
Dec 4, 2023 13:00:15.055614948 CET	49767	25	192.168.2.4	142.251.16.27	RCPT TO: <kpdecker@gmail.com>
Dec 4, 2023 13:00:15.058969021 CET	25	49768	142.251.16.27	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 13:00:15.059290886 CET	49768	25	192.168.2.4	142.251.16.27	MAIL FROM: <react-window-provider@2.2.15>
Dec 4, 2023 13:00:15.167443991 CET	25	49768	142.251.16.27	192.168.2.4	250 2.1.0 OK i21-20020a05620a145500b0077d7d37d036si8779639qkl.687 - gsmtp
Dec 4, 2023 13:00:15.167650938 CET	49768	25	192.168.2.4	142.251.16.27	RCPT TO: <ifaaan@gmail.com>
Dec 4, 2023 13:00:15.228240967 CET	25	49766	142.251.167.26	192.168.2.4	250 2.1.5 OK gi4-20020a056214248400b0067ac4b8a125si2628884qvb.39 - gsmtp
Dec 4, 2023 13:00:15.228471041 CET	49766	25	192.168.2.4	142.251.167.26	DATA
Dec 4, 2023 13:00:15.304883957 CET	25	49768	142.251.16.27	192.168.2.4	250 2.1.5 OK i21-20020a05620a145500b0077d7d37d036si8779639qkl.687 - gsmtp
Dec 4, 2023 13:00:15.305094004 CET	49768	25	192.168.2.4	142.251.16.27	DATA
Dec 4, 2023 13:00:15.314003944 CET	25	49767	142.251.16.27	192.168.2.4	250 2.1.5 OK fe15-20020a05622a4d4f00b004254a3cdd6dsi4358025qtb.234 - gsmtp
Dec 4, 2023 13:00:15.314204931 CET	49767	25	192.168.2.4	142.251.16.27	DATA
Dec 4, 2023 13:00:15.358448982 CET	25	49766	142.251.167.26	192.168.2.4	354 Go ahead gi4-20020a056214248400b0067ac4b8a125si2628884qvb.39 - gsmtp
Dec 4, 2023 13:00:15.393922091 CET	25	49769	66.196.36.12	192.168.2.4	220 kryten.reg.ca ESMTP Exim 4.95 Ubuntu Mon, 04 Dec 2023 04:00:15 -0800
Dec 4, 2023 13:00:15.394141912 CET	49769	25	192.168.2.4	66.196.36.12	EHLO vision-media.ca
Dec 4, 2023 13:00:15.413059950 CET	25	49768	142.251.16.27	192.168.2.4	354 Go ahead i21-20020a05620a145500b0077d7d37d036si8779639qkl.687 - gsmtp
Dec 4, 2023 13:00:15.421884060 CET	25	49767	142.251.16.27	192.168.2.4	354 Go ahead fe15-20020a05622a4d4f00b004254a3cdd6dsi4358025qtb.234 - gsmtp
Dec 4, 2023 13:00:15.557024002 CET	25	49769	66.196.36.12	192.168.2.4	250-kryten.reg.ca Hello vision-media.ca [102.165.48.83] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPE_CONNECT 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP
Dec 4, 2023 13:00:15.557511091 CET	49769	25	192.168.2.4	66.196.36.12	MAIL FROM: <sdx-cardview-caret-rtl@2x.png>
Dec 4, 2023 13:00:15.719779968 CET	25	49769	66.196.36.12	192.168.2.4	250 OK
Dec 4, 2023 13:00:15.721424103 CET	49769	25	192.168.2.4	66.196.36.12	RCPT TO: <tj@vision-media.ca>
Dec 4, 2023 13:00:15.747601032 CET	25	49768	142.251.16.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. i21-20020a05620a145500b0077d7d37d036si8779639qkl.687 - gsmtp
Dec 4, 2023 13:00:15.760541916 CET	25	49767	142.251.16.27	192.168.2.4	550-5.7.1 [102.165.48.83] Messages missing a valid Message-ID header are not 550-5.7.1 accepted. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. fe15-20020a05622a4d4f00b004254a3cdd6dsi4358025qtb.234 - gsmtp
Dec 4, 2023 13:00:15.809653997 CET	25	49766	142.251.167.26	192.168.2.4	550-5.7.1 [102.165.48.83] Gmail has detected that this message is not RFC 5322 550-5.7.1 compliant: 550-5.7.1 'From' header has non compliant domain name. 550-5.7.1 To reduce the amount of spam sent to Gmail, this message has been 550-5.7.1 blocked. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. gi4-20020a056214248400b0067ac4b8a125si2628884qvb.39 - gsmtp
Dec 4, 2023 13:00:15.887720108 CET	25	49769	66.196.36.12	192.168.2.4	451-102.165.48.83 is not yet authorized to deliver mail from 451 <sdx-cardview-caret-rtl@2x.png> to <tj@vision-media.ca>. Please try later.
Dec 4, 2023 13:00:16.051702976 CET	25	49769	66.196.36.12	192.168.2.4	421 kryten.reg.ca lost input connection
Dec 4, 2023 13:00:23.715734959 CET	25	49770	142.251.167.26	192.168.2.4	220 mx.google.com ESMTP t4-20020a05620a450400b0077da2eda4a9si10214392qkp.705 - gsmtp
Dec 4, 2023 13:00:23.715970039 CET	49770	25	192.168.2.4	142.251.167.26	EHLO sitnik.ru
Dec 4, 2023 13:00:23.834898949 CET	25	49771	17.57.154.33	192.168.2.4	220 iCloud iscream SMTP proxy - p00-iscream-smtp-d759469dd-ss5bd 3.5.0 (2403B23-529c1e05a5df)
Dec 4, 2023 13:00:23.835134029 CET	49771	25	192.168.2.4	17.57.154.33	EHLO blakeembrey.com
Dec 4, 2023 13:00:23.853503942 CET	25	49770	142.251.167.26	192.168.2.4	250-mx.google.com at your service, [102.165.48.83] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
Dec 4, 2023 13:00:23.856446981 CET	49770	25	192.168.2.4	142.251.167.26	MAIL FROM: <runtime@7.22.5>
Dec 4, 2023 13:00:23.984818935 CET	25	49771	17.57.154.33	192.168.2.4	250-p00-iscream-smtp-d759469dd-ss5bd 250-PIPELINING 250-SIZE 28311552 250-ETRN 250-STARTTLS 250-AUTH LOGIN PLAIN ATOKEN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
Dec 4, 2023 13:00:23.985162973 CET	49771	25	192.168.2.4	17.57.154.33	MAIL FROM: <purecatamphetamine@gmail.com>
Dec 4, 2023 13:00:23.991285086 CET	25	49770	142.251.167.26	192.168.2.4	250 2.1.0 OK t4-20020a05620a450400b0077da2eda4a9si10214392qkp.705 - gsmtp
Dec 4, 2023 13:00:23.991462946 CET	49770	25	192.168.2.4	142.251.167.26	RCPT TO: <andrey@sitnik.ru>
Dec 4, 2023 13:00:24.136010885 CET	25	49771	17.57.154.33	192.168.2.4	250 2.1.0 Ok
Dec 4, 2023 13:00:24.136115074 CET	49771	25	192.168.2.4	17.57.154.33	RCPT TO: <hello@blakeembrey.com>
Dec 4, 2023 13:00:24.238989115 CET	25	49770	142.251.167.26	192.168.2.4	250 2.1.5 OK t4-20020a05620a450400b0077da2eda4a9si10214392qkp.705 - gsmtp
Dec 4, 2023 13:00:24.239170074 CET	49770	25	192.168.2.4	142.251.167.26	DATA
Dec 4, 2023 13:00:24.374867916 CET	25	49770	142.251.167.26	192.168.2.4	354 Go ahead t4-20020a05620a450400b0077da2eda4a9si10214392qkp.705 - gsmtp
Dec 4, 2023 13:00:24.649499893 CET	25	49771	17.57.154.33	192.168.2.4	550 5.7.1 Mail from IP 102.165.48.83 was rejected due to listing in Spamhaus SBL. For details please see http://www.spamhaus.org/query/bl?ip=102.165.48.83 550 5.7.1 Mail from IP 102.165.48.83 was rejected due to listing in Spamhaus SBL. For details please see http://www.spamhaus.org/query/bl?ip=102.165.48.83
Dec 4, 2023 13:00:24.726624012 CET	25	49770	142.251.167.26	192.168.2.4	550-5.7.1 [102.165.48.83] Gmail has detected that this message is not RFC 5322 550-5.7.1 compliant: 550-5.7.1 'From' header has non compliant domain name. 550-5.7.1 To reduce the amount of spam sent to Gmail, this message has been 550-5.7.1 blocked. Please visit 550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and review 550 5.7.1 RFC 5322 specifications for more information. t4-20020a05620a450400b0077da2eda4a9si10214392qkp.705 - gsmtp

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: webcam.txt.com.exePID: 6288, Parent PID: 2580

General

Target ID:	0
Start time:	12:56:37
Start date:	04/12/2023
Path:	C:\Users\user\Desktop\webcam.txt.com.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\webcam.txt.com.exe
Imagebase:	0x400000
File size:	25'353 bytes
MD5 hash:	0E17DBEC1904B7C10614BFB29EF758FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: winlogon.exePID: 2004, Parent PID: 2580

General

Target ID:	1
Start time:	12:56:46
Start date:	04/12/2023
Path:	C:\Windows\winlogon.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\winlogon.exe" -stealth
Imagebase:	0x400000
File size:	25'353 bytes
MD5 hash:	0E17DBEC1904B7C10614BFB29EF758FD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: webcam.txt.com.exePID: 6288, Parent PID: 2580COMMON

Execution Graph

Execution Coverage:	32.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	9.2%
Total number of Nodes:	433
Total number of Limit Nodes:	4

Executed Functions

Function 00402CEA Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 89
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileA.KERNELBASE(?,?,?,?,?,00408890), ref: 00402D25
CharLowerBuffA.USER32(?,00000000,?,?,?,?,?,?,?,?,?,?,00408890), ref: 00402DBD
FindNextFileA.KERNELBASE(00000000,00000010,?,?,?,?,?,?,?,?,?,?,00408890), ref: 00402E1F
FindClose.KERNELBASE(00000000,?,?,?,?,?,?,?,?,?,?,00408890), ref: 00402E2E

Part of subcall function 00402A51: _lopen.KERNEL32(?,00000000), ref: 00402AB8
Part of subcall function 00402A51: _hread.KERNEL32(?,?,00001000), ref: 00402AF4
Part of subcall function 00402A51: CharLowerBuffA.USER32(00000000,00000000), ref: 00402B1B

Strings

\*.*, xrefs: 00402D09
., xrefs: 00402D5D
., xrefs: 00402D66
shar, xrefs: 00402DD2

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: Find$BuffCharFileLower$CloseFirstNext_hread_lopen
String ID: .$.$\*.*$shar
API String ID: 350507150-3271563406
Opcode ID: 5fc5424881c6c12c193400b34dfb33e230c5c2a2005d26602844cd16e9d60960
Instruction ID: af0736c58c016ddeb0cabaee310bdccb81470b733d605c7cd839ae1c487058f6
Opcode Fuzzy Hash: 5fc5424881c6c12c193400b34dfb33e230c5c2a2005d26602844cd16e9d60960
Instruction Fuzzy Hash: 14311E7284066C6ADF25AA65CD4DBDF766C6B04309F1404FBE609F21C1E6BC8BC44E69

Uniqueness

Uniqueness Score: -1.00%

Function 00401B67 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 88
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLocalTime.KERNEL32(?), ref: 00401BF9
GetTimeZoneInformation.KERNELBASE(00000000), ref: 00401C0D
wsprintfA.USER32 ref: 00401CA5

Strings

>, xrefs: 00401C25
%s, %u %s %u %.2u:%.2u:%.2u %s%.2u%.2u, xrefs: 00401C9D

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: Time$InformationLocalZonewsprintf
String ID: %s, %u %s %u %.2u:%.2u:%.2u %s%.2u%.2u$>
API String ID: 1715792076-923901428
Opcode ID: 4a9d39a1a4b49a15a0af5199b82552f90bc8b5fc0a2882355a9521fa874379f6
Instruction ID: a1fd622096a8bf0a5f403f72d1136a8b65eff9f0f4c68601542a21ac2b23e156
Opcode Fuzzy Hash: 4a9d39a1a4b49a15a0af5199b82552f90bc8b5fc0a2882355a9521fa874379f6
Instruction Fuzzy Hash: CD3121B0D003189ACF10DFC5D8085EEBBF6EF05718F00806AE655B6290D3BC59A5CB5E

Uniqueness

Uniqueness Score: -1.00%

Function 00403085 Relevance: 7.5, APIs: 5, Instructions: 37
threadsleeptimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThread.KERNEL32 ref: 0040308D
SetThreadPriority.KERNELBASE(00000000), ref: 00403094
GetLocalTime.KERNEL32(?), ref: 0040309E
Beep.KERNEL32 ref: 004030E9
Sleep.KERNELBASE(00000032), ref: 004030F1

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: Thread$BeepCurrentLocalPrioritySleepTime
String ID:
API String ID: 322507061-0
Opcode ID: e7d7355b9173c2046c153bffd65369e90e1cb392ad8c99d8a323b2e8ebad37a6
Instruction ID: 666856a2101ccab237df132475821c9f98106921f9c098f37887d323279d59a2
Opcode Fuzzy Hash: e7d7355b9173c2046c153bffd65369e90e1cb392ad8c99d8a323b2e8ebad37a6
Instruction Fuzzy Hash: 28F08C20D41205AACF10BFA0D90E87E7A7DAB0031AF11C52BA152721D2ABB90BC4836E

Uniqueness

Uniqueness Score: -1.00%

Function 00403B04 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 75
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVersion.KERNEL32 ref: 00403B2A

Part of subcall function 00404683: HeapCreate.KERNELBASE(00000000,00001000,00000000,00403B63,00000000), ref: 00404694
Part of subcall function 00404683: HeapDestroy.KERNEL32 ref: 004046B2

GetCommandLineA.KERNEL32 ref: 00403B78
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00403BC6

Strings

x%I, xrefs: 00403B7E

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: Heap$CommandCreateDestroyHandleLineModuleVersion
String ID: x%I
API String ID: 2736944706-1112590633
Opcode ID: c1a7a2cec080945146dc668cefc1699e97db2957981a3824a0b34371f317d2c6
Instruction ID: d46f6c68c26d4c1b299e5b91e5fb46e43711b55dc765b057d004a842d80414bb
Opcode Fuzzy Hash: c1a7a2cec080945146dc668cefc1699e97db2957981a3824a0b34371f317d2c6
Instruction Fuzzy Hash: 7A218EB1944714AADB04AFA6DC06AAE7BB9EF45705F10413EF601BB2D1DB3C4940CB59

Uniqueness

Uniqueness Score: -1.00%

Function 00401D9B Relevance: 3.1, APIs: 2, Instructions: 77networkCOMMON

Download Yara Rule

APIs

send.WS2_32(00000002,00000000,00000000,00000000), ref: 00401DC1
recv.WS2_32(00000002,?,00000001,00000000), ref: 00401DF5

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: recvsend
String ID:
API String ID: 740075404-0
Opcode ID: 517a9e016b700c8772a2e7f1b3bafd8337e68351bd005c7d94a544a7751204c2
Instruction ID: 68de028cd3e712b94d0dd286207e4a41eea24123e07cfa277c59af56183adfc3
Opcode Fuzzy Hash: 517a9e016b700c8772a2e7f1b3bafd8337e68351bd005c7d94a544a7751204c2
Instruction Fuzzy Hash: B721F6311000049EDB319E68CC88BEA7BAAEF05758F100177EA45FA1F1D779994AC78D

Uniqueness

Uniqueness Score: -1.00%

Function 00401E62 Relevance: 86.4, APIs: 20, Strings: 29, Instructions: 698
networkstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrcpy.KERNEL32(00000000,00000001), ref: 00401EA7
lstrcpy.KERNEL32(?,00000004), ref: 00401EDC
gethostbyname.WS2_32(?), ref: 00401EF0
htons.WS2_32(00000019), ref: 00401F28
socket.WS2_32(00000002,00000001,00000006), ref: 00401F38
setsockopt.WS2_32(00000000,0000FFFF,00001006,?,?), ref: 00401F60
setsockopt.WS2_32(?,0000FFFF,00001005,00003A98,?), ref: 00401F71
connect.WS2_32(?,00000002,00000010), ref: 00401F7C
GetWindowsDirectoryA.KERNEL32(?,00000400), ref: 0040221A
send.WS2_32(?,?,00000000,00000000), ref: 00402479
wsprintfA.USER32 ref: 004024A1
send.WS2_32(?,?,00000000,00000000), ref: 0040252E
send.WS2_32(?,?,00000000,00000000), ref: 004025A2
send.WS2_32(?,0040AB98,00000000,00000000), ref: 004025C6
send.WS2_32(?,?,00000000,00000000), ref: 00402664
_lopen.KERNEL32(?,00000000), ref: 0040266F
shutdown.WS2_32(?,00000002), ref: 0040276F

Part of subcall function 00401CB2: _hread.KERNEL32(00000000,00000048,00000001), ref: 00401CD4
Part of subcall function 00401CB2: send.WS2_32(00000000,?,00000001,00000000), ref: 00401D16
Part of subcall function 00401CB2: send.WS2_32(00000000,0040AB98,00000002,00000000), ref: 00401D4F

_lclose.KERNEL32(00000000), ref: 00402698
send.WS2_32(?,?,00000000,00000000), ref: 00402755

Part of subcall function 0040379B: DeleteFileA.KERNELBASE(?,00402769,?), ref: 0040379F
Part of subcall function 0040379B: GetLastError.KERNEL32 ref: 004037A9

closesocket.WS2_32(?), ref: 0040277B

Strings

"Content-Transfer-Encoding: base64Content-Disposition: attachment;filename=", xrefs: 00402618
Content-Type: application/octet-stream;name=", xrefs: 0040237E
>, xrefs: 004020CD, 004020D8, 0040212B
To: , xrefs: 004023BE
QUIT, xrefs: 0040272E
., xrefs: 004026FF
.zip, xrefs: 004022B3
EHLO , xrefs: 0040200A
X-Priority: 3, xrefs: 004024E2
", xrefs: 004024D1
Date: , xrefs: 0040241B
", xrefs: 0040263C
Content-Type: application/x-zip-compressed;name=", xrefs: 00402304
----=_NextPart_%.3u_%.4u_%.8X.%.8X, xrefs: 0040249B
DATA, xrefs: 0040215E
X-MSMail-Priority: Normal, xrefs: 004024F3
Subject: , xrefs: 004023EB
From: , xrefs: 00402391
\, xrefs: 0040222C
--, xrefs: 004026DB
--, xrefs: 004026B7
This is a multi-part message in MIME format., xrefs: 00402507
Content-Type: text/plain;charset="Windows-1252"Content-Transfer-Encoding: 7bit, xrefs: 0040257A
MIME-Version: 1.0, xrefs: 0040244B
HELO , xrefs: 0040205E
, xrefs: 004025CE
MAIL FROM: <, xrefs: 004020B5
Content-Type: multipart/mixed;boundary=", xrefs: 004024A7
RCPT TO: <, xrefs: 0040210B

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: send$lstrcpysetsockopt$DeleteDirectoryErrorFileLastWindows_hread_lclose_lopenclosesocketconnectgethostbynamehtonsshutdownsocketwsprintf
String ID: $--$.$MIME-Version: 1.0$"$"$"Content-Transfer-Encoding: base64Content-Disposition: attachment;filename="$--$----=_NextPart_%.3u_%.4u_%.8X.%.8X$.zip$>$Content-Type: application/octet-stream;name="$Content-Type: application/x-zip-compressed;name="$Content-Type: multipart/mixed;boundary="$Content-Type: text/plain;charset="Windows-1252"Content-Transfer-Encoding: 7bit$DATA$Date: $EHLO $From: $HELO $MAIL FROM: <$QUIT$RCPT TO: <$Subject: $This is a multi-part message in MIME format.$To: $X-MSMail-Priority: Normal$X-Priority: 3$\
API String ID: 3478418677-3520763247
Opcode ID: daaacdc70ee3e646fb58c61556225893349485dd7ac7c14b70f4c701aa7bb07b
Instruction ID: ad1650301917ef9bdeae7df7c3b8aa9d762db0040f3838a3b6728485160f7748
Opcode Fuzzy Hash: daaacdc70ee3e646fb58c61556225893349485dd7ac7c14b70f4c701aa7bb07b
Instruction Fuzzy Hash: 023242B2D002187ADB20EFA1DD46FDEB7BD9B08704F1004BBB605F21D1D679AB548B69

Uniqueness

Uniqueness Score: -1.00%

Function 00402EA0 Relevance: 50.9, APIs: 8, Strings: 21, Instructions: 156
registryfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetWindowsDirectoryA.KERNEL32(?,00000400), ref: 00402ECA
CopyFileA.KERNEL32(?,?,00000000), ref: 00402F1C
RegOpenKeyA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Run,?), ref: 00402F45
RegSetValueExA.KERNELBASE(?,ICQ Net,00000000,00000001,?,00000000), ref: 00402F6B
RegCloseKey.ADVAPI32(?), ref: 00402F74
RegDeleteKeyA.ADVAPI32(80000000,CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32), ref: 00402FB9

Part of subcall function 00402E72: RegOpenKeyA.ADVAPI32(?,?,?), ref: 00402E7F
Part of subcall function 00402E72: RegDeleteValueA.KERNELBASE(?,?), ref: 00402E8F
Part of subcall function 00402E72: RegCloseKey.KERNELBASE(?), ref: 00402E98

RegDeleteKeyA.ADVAPI32(80000001,Software\Microsoft\Windows\CurrentVersion\Explorer\PINF), ref: 00403053
RegDeleteKeyA.ADVAPI32(80000002,System\CurrentControlSet\Services\WksPatch ), ref: 0040305F

Strings

KasperskyAv, xrefs: 00402FBF, 00402FCB
Taskmon, xrefs: 00402F7A, 00402F7F, 00402F87
-stealth, xrefs: 00402F28
winlogon.exe, xrefs: 00402F00
Software\Microsoft\Windows\CurrentVersion\Explorer\PINF, xrefs: 0040304D
SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, xrefs: 00402FE8
Explorer, xrefs: 00402F94, 00402FA0
ICQ Net, xrefs: 00402F63
msgsvr32, xrefs: 00402FF3
service, xrefs: 00403026
au.exe, xrefs: 0040301A
system., xrefs: 00402FD7, 00402FE3
CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32, xrefs: 00402FAF
OLE, xrefs: 00403032
Sentry, xrefs: 0040303E
SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xrefs: 00402F38, 00402F43, 00402F80, 00402F8D, 00402F99, 00402FA5, 00402FC4, 00402FD0, 00402FDC, 00402FF8, 00403004, 00403013, 0040301F, 0040302B, 00403037, 00403043, 0040306A, 00403076
System\CurrentControlSet\Services\WksPatch , xrefs: 00403059
Windows Services Host, xrefs: 00403065, 00403071
DELETE ME, xrefs: 00402FFF
d3dupdate.exe, xrefs: 0040300E
\, xrefs: 00402EDC

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: Delete$CloseOpenValue$CopyDirectoryFileWindows
String ID: -stealth$CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32$DELETE ME$Explorer$ICQ Net$KasperskyAv$OLE$SOFTWARE\Microsoft\Windows\CurrentVersion\Run$SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices$Sentry$Software\Microsoft\Windows\CurrentVersion\Explorer\PINF$System\CurrentControlSet\Services\WksPatch $Taskmon$Windows Services Host$\$au.exe$d3dupdate.exe$msgsvr32$service$system.$winlogon.exe
API String ID: 2778398710-2502385722
Opcode ID: e203d9d93130e63325ec6b4449cefa42c11d833b288b1e7fc9bb28794195d0b6
Instruction ID: 84feb7293dd50699fc8e53e7ee761e706d635917d92738f507599102555b4bc5
Opcode Fuzzy Hash: e203d9d93130e63325ec6b4449cefa42c11d833b288b1e7fc9bb28794195d0b6
Instruction Fuzzy Hash: 174184A25C031475C620B772CD4EF9B3A6CDF65759F60007BBA09710C2CABC991046FE

Uniqueness

Uniqueness Score: -1.00%

Function 004010A4 Relevance: 29.9, APIs: 15, Strings: 2, Instructions: 150
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getservbyname.WS2_32(nameserver,UDP), ref: 004010FF
htons.WS2_32(00000035), ref: 00401111
inet_addr.WS2_32(00000000), ref: 0040111A
gethostbyname.WS2_32(00000000), ref: 0040112B
socket.WS2_32(00000002,00000002,00000000), ref: 00401144
htons.WS2_32(000011DF), ref: 00401164
htons.WS2_32(00000001), ref: 00401176
htons.WS2_32(00000002), ref: 004011B6
htons.WS2_32(00000001), ref: 004011C2
setsockopt.WS2_32(0000000F,0000FFFF,00001006,?,?), ref: 004011ED
setsockopt.WS2_32(0000000F,0000FFFF,00001005,00000FA0,?), ref: 004011FF
sendto.WS2_32(0000000F,00000000,-00000010,00000000,00000002,00000010), ref: 00401215
recvfrom.WS2_32(0000000F,00408030,00000800,00000000,00000002,00408030), ref: 00401238
WSAGetLastError.WS2_32(?,74DF05F0,?), ref: 00401243
closesocket.WS2_32(0000000F), ref: 0040125B

Strings

UDP, xrefs: 004010F5
nameserver, xrefs: 004010FA

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: htons$setsockopt$ErrorLastclosesocketgethostbynamegetservbynameinet_addrrecvfromsendtosocket
String ID: UDP$nameserver
API String ID: 2147619886-4175462922
Opcode ID: c2c4ea1a7d312aeaef9fa15988cadba241fcaab0d9df87588d876636e5593e70
Instruction ID: 54f4538c7bcc46d7fdc4aaefdd6ffe4718887d5174617e4dee6c76f625f832c1
Opcode Fuzzy Hash: c2c4ea1a7d312aeaef9fa15988cadba241fcaab0d9df87588d876636e5593e70
Instruction Fuzzy Hash: F251C331500258AADB10AF64DC45BDEB7B9FF04320F204276FA56FA2E1DBB44A518BD9

Uniqueness

Uniqueness Score: -1.00%

Function 00402A51 Relevance: 26.4, APIs: 5, Strings: 10, Instructions: 169
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_lopen.KERNEL32(?,00000000), ref: 00402AB8
_hread.KERNEL32(?,?,00001000), ref: 00402AF4
CharLowerBuffA.USER32(00000000,00000000), ref: 00402B1B
_llseek.KERNEL32(?,?,00000000), ref: 00402C1E
_lclose.KERNEL32(?), ref: 00402C4D

Strings

.sht, xrefs: 00402B21
.tbb, xrefs: 00402B38
.oft, xrefs: 00402B8C
.msg, xrefs: 00402B79
.@, xrefs: 00402A61
.dbx, xrefs: 00402BB2
~A, xrefs: 00402ACA
.wab, xrefs: 00402B66
.adb, xrefs: 00402B4F
.doc, xrefs: 00402B9F

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: BuffCharLower_hread_lclose_llseek_lopen
String ID: .@$.adb$.dbx$.doc$.msg$.oft$.sht$.tbb$.wab$~A
API String ID: 4116433239-3774032708
Opcode ID: f94fbc363f65885cc776d653e02bf959290bd37ae85559714c094d146decd2f4
Instruction ID: f2dafe6271f346f72b0dcdc4685929b99cb8ccfb922ebbe08748fce3a86fe255
Opcode Fuzzy Hash: f94fbc363f65885cc776d653e02bf959290bd37ae85559714c094d146decd2f4
Instruction Fuzzy Hash: 9651D676600209BAEF15EFA1DE49ADE7B7CDF04326F2041BBF400B10D1DBB89E904A18

Uniqueness

Uniqueness Score: -1.00%

Function 004017AD Relevance: 23.0, APIs: 12, Strings: 1, Instructions: 201
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,80000000,00000003,00000000,00000003,00000080,00000000,0040AB98,00000400,000000C8), ref: 004017D5
CreateFileA.KERNELBASE(?,40000000,00000003,00000000,00000002,00000080,00000000), ref: 004017FA

Part of subcall function 004019E8: GetSystemTime.KERNEL32(0000002E,0000002E,?,00000000,0000001E), ref: 004019F2

Part of subcall function 00401A6D: SetFilePointer.KERNELBASE(00000000,00000000,00000000,00000000,00000000,00000000,0041A051), ref: 00401A81
Part of subcall function 00401A6D: ReadFile.KERNELBASE(00000000,?,00000400,0000001E,00000000), ref: 00401AA8
Part of subcall function 00401A6D: SetFilePointer.KERNELBASE(00000000,00000000,00000000,00000000), ref: 00401AE6

GetFileSize.KERNEL32(?,00000000), ref: 00401891
GetFileSize.KERNEL32(?,00000000), ref: 0040189D
WriteFile.KERNELBASE(00000000,04034B50,0000001E,?,00000000), ref: 004018D5
WriteFile.KERNELBASE(?,004022FE,00000000), ref: 004018E8
SetFilePointer.KERNELBASE(?,00000000,00000000,00000000), ref: 004018FB
ReadFile.KERNELBASE(?,?,00000400,?,00000000), ref: 00401918
WriteFile.KERNELBASE(?,?,?,?,00000000), ref: 00401939
WriteFile.KERNELBASE(?,?,0000002E,?,00000000), ref: 0040196F
WriteFile.KERNELBASE(?,004022FE,00000000), ref: 00401982
WriteFile.KERNELBASE(?,06054B50,00000016,?,00000000), ref: 004019C3

Strings

, xrefs: 00401968

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: File$Write$Pointer$CreateReadSize$SystemTime
String ID:
API String ID: 220895958-3916222277
Opcode ID: aab24eb8617f8d725d7d8e24e7180a7e7e8e5969de52de2914c22b74f2718137
Instruction ID: b2c603c1d1320f768cb9f7d01f3a84518a27657aa67346375d6e3d71cd624553
Opcode Fuzzy Hash: aab24eb8617f8d725d7d8e24e7180a7e7e8e5969de52de2914c22b74f2718137
Instruction Fuzzy Hash: 6071267590121CBADF11DFA1CC84EDFBBB9FF08350F10412AF914AA2A0D7359A54CBA8

Uniqueness

Uniqueness Score: -1.00%

Function 004030F9 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 119
threadnetworksleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTickCount.KERNEL32 ref: 00403105
CreateMutexA.KERNELBASE(00000000,00000000,00000000), ref: 0040311C
GetLastError.KERNEL32 ref: 00403127
WSAStartup.WS2_32(00000101,?), ref: 00403149
CreateThread.KERNELBASE(00000000,00000000,Function_00002E37,00000000,00000000,?), ref: 004031A9
CreateThread.KERNELBASE(00000000,00000000,Function_00003085,00000000,00000000,?), ref: 004031B8
Sleep.KERNELBASE(00000032), ref: 004031BC
InternetGetConnectedState.WININET(?,00000000), ref: 004031CA
GetExitCodeThread.KERNELBASE(00000000,?), ref: 00403207
CreateThread.KERNELBASE(00000000,00000000,Function_00001E62,0040DDC0,00000000,?), ref: 0040322B
InternetGetConnectedState.WININET(?,00000000), ref: 0040324F
Sleep.KERNELBASE(00000032), ref: 00403259

Strings

jfkoofia@yahoo.com, xrefs: 00403162, 0040316D, 0040317F

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: CreateThread$ConnectedInternetSleepState$CodeCountErrorExitLastMutexStartupTick
String ID: jfkoofia@yahoo.com
API String ID: 1202457691-1009674638
Opcode ID: 4db236c8f64a66a94e666b966866f959043465874e8551258ceb0bafea335d50
Instruction ID: a1bf2ff7ef5bceeac63f91e3b4f6e5b3c95491823722eaf96483bc5270944901
Opcode Fuzzy Hash: 4db236c8f64a66a94e666b966866f959043465874e8551258ceb0bafea335d50
Instruction Fuzzy Hash: C3418DB1940209AFEB00DFA0DD889AF7BBCEB08349F10447AF546F3291D7785E558B69

Uniqueness

Uniqueness Score: -1.00%

Function 0040156C Relevance: 6.1, APIs: 4, Instructions: 108
memorynetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalAlloc.KERNEL32(00000040,00000248,00000000,0041A04C,?), ref: 0040159F
GetNetworkParams.IPHLPAPI(00000000,?), ref: 004015AB
GlobalAlloc.KERNEL32(00000040,?), ref: 004015C1
GetNetworkParams.IPHLPAPI(00000000,?), ref: 004015CA

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: AllocGlobalNetworkParams
String ID:
API String ID: 3514119424-0
Opcode ID: b6989ceaf6a03dd3dd631485981c7ef7645e8d2b24465e3c30eabdb139561af4
Instruction ID: c581374ef95c225fa66d458b5d7b2084ae11338eb7f1df88d1f5ced31a198c6c
Opcode Fuzzy Hash: b6989ceaf6a03dd3dd631485981c7ef7645e8d2b24465e3c30eabdb139561af4
Instruction Fuzzy Hash: 0A31E676900214ABDB11DBA0CC45FDA77ECAF40750F0940B6EA45F72A1DB799E848B98

Uniqueness

Uniqueness Score: -1.00%

Function 00401CB2 Relevance: 4.6, APIs: 3, Instructions: 82
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_hread.KERNEL32(00000000,00000048,00000001), ref: 00401CD4
send.WS2_32(00000000,?,00000001,00000000), ref: 00401D16
send.WS2_32(00000000,0040AB98,00000002,00000000), ref: 00401D4F

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: send$_hread
String ID:
API String ID: 770882311-0
Opcode ID: 9568b479f45dfe81c6e836dc9d064f14b8b6d94a03e0000c5ae6400c2a12506e
Instruction ID: 4473fe92f90581cfab6e991a706c643bebd06036b7b4de64e9f910bb31183d2b
Opcode Fuzzy Hash: 9568b479f45dfe81c6e836dc9d064f14b8b6d94a03e0000c5ae6400c2a12506e
Instruction Fuzzy Hash: 3E21B676E00218AADF219BA5CC84AEFB7B9FF40725F20423BE525F21E0D3759A41CB54

Uniqueness

Uniqueness Score: -1.00%

Function 00401A6D Relevance: 4.6, APIs: 3, Instructions: 55
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFilePointer.KERNELBASE(00000000,00000000,00000000,00000000,00000000,00000000,0041A051), ref: 00401A81
ReadFile.KERNELBASE(00000000,?,00000400,0000001E,00000000), ref: 00401AA8
SetFilePointer.KERNELBASE(00000000,00000000,00000000,00000000), ref: 00401AE6

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: File$Pointer$Read
String ID:
API String ID: 2010065189-0
Opcode ID: e81b818a9960a86f8ab5b2329bdd6e1202786cb99db1b9c1e44af20c7a116313
Instruction ID: 2da40f7e4de96e1f52dca9c8c0568d948c402fee187df06ded76a7700b51998a
Opcode Fuzzy Hash: e81b818a9960a86f8ab5b2329bdd6e1202786cb99db1b9c1e44af20c7a116313
Instruction Fuzzy Hash: 731103B5901028BBDB219F91CD48CDFBF7CEF453A4F1040A6BA09A2120D6359A56DBA4

Uniqueness

Uniqueness Score: -1.00%

Function 004050D4 Relevance: 4.6, APIs: 3, Instructions: 53
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,000041C4,00000013), ref: 00405130
VirtualAlloc.KERNELBASE(00000000,00100000,00002000,?), ref: 0040514A
HeapFree.KERNEL32(00000000,?), ref: 00405161

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: Heap$AllocAllocateFreeVirtual
String ID:
API String ID: 1702295773-0
Opcode ID: 85fe7fa33a580cbed554531df588a258a414acce59b53c0c872e434cf99fc004
Instruction ID: e0ef3e5d47e0e8a7737a84c02c4b327dd222423e0ed1cb0d0df2e217ac6451dd
Opcode Fuzzy Hash: 85fe7fa33a580cbed554531df588a258a414acce59b53c0c872e434cf99fc004
Instruction Fuzzy Hash: 0D113A34601A00AFC7228F19EC45AA77BB6FB857607108A7DE166DB1F1CB719851CF1C

Uniqueness

Uniqueness Score: -1.00%

Function 00402E37 Relevance: 4.5, APIs: 3, Instructions: 19
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThread.KERNEL32 ref: 00402E3A
SetThreadPriority.KERNELBASE(00000000), ref: 00402E41
GetDriveTypeA.KERNELBASE(00408890), ref: 00402E4E

Part of subcall function 00402CEA: FindFirstFileA.KERNELBASE(?,?,?,?,?,00408890), ref: 00402D25
Part of subcall function 00402CEA: CharLowerBuffA.USER32(?,00000000,?,?,?,?,?,?,?,?,?,?,00408890), ref: 00402DBD
Part of subcall function 00402CEA: FindNextFileA.KERNELBASE(00000000,00000010,?,?,?,?,?,?,?,?,?,?,00408890), ref: 00402E1F
Part of subcall function 00402CEA: FindClose.KERNELBASE(00000000,?,?,?,?,?,?,?,?,?,?,00408890), ref: 00402E2E

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: Find$FileThread$BuffCharCloseCurrentDriveFirstLowerNextPriorityType
String ID:
API String ID: 1999482922-0
Opcode ID: d359eda30bd99ca2578c6909916dfbc08d0e588617aa7c448a226afa4219755d
Instruction ID: 8cd0d0fb09a5a5791e36263293d59010951bc12952289bb9296594470fb44683
Opcode Fuzzy Hash: d359eda30bd99ca2578c6909916dfbc08d0e588617aa7c448a226afa4219755d
Instruction Fuzzy Hash: 07D012338445109BEB516B74EE4C84A7A60AB01370366853BF89BF11F5CA3A4C50869C

Uniqueness

Uniqueness Score: -1.00%

Function 00402E72 Relevance: 4.5, APIs: 3, Instructions: 16registryCOMMON

Download Yara Rule

APIs

RegOpenKeyA.ADVAPI32(?,?,?), ref: 00402E7F
RegDeleteValueA.KERNELBASE(?,?), ref: 00402E8F
RegCloseKey.KERNELBASE(?), ref: 00402E98

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: CloseDeleteOpenValue
String ID:
API String ID: 849931509-0
Opcode ID: 3b985ecdd61c1c89794105ca6529a412aece386b509cd62460330d0951179110
Instruction ID: 1436ff2723aeba4cc04e22aeec036778132b69948e9ecde5d523fc4d6487a0d8
Opcode Fuzzy Hash: 3b985ecdd61c1c89794105ca6529a412aece386b509cd62460330d0951179110
Instruction Fuzzy Hash: 0DD0423614010CFBEF019F90EE0889A7B6AFB04215B01C121FA1EA4030D7329A209B58

Uniqueness

Uniqueness Score: -1.00%

Function 00402C58 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 44fileCOMMON

Download Yara Rule

APIs

CopyFileA.KERNEL32(?,?,00000000), ref: 00402CD6

Strings

-@, xrefs: 00402C7B

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: CopyFile
String ID: -@
API String ID: 1304948518-2999422947
Opcode ID: b0f22df91630fefda9ee2f27dd11d90a23badb2b96bd2b4392767755468bc6c4
Instruction ID: 0ab4f68e2b3d47de9f352ec209093b6dbe49d88b4694b0089f9e1c04f9ec070a
Opcode Fuzzy Hash: b0f22df91630fefda9ee2f27dd11d90a23badb2b96bd2b4392767755468bc6c4
Instruction Fuzzy Hash: AB0148F6C002286ADF20EB55DC09FD9776CBB00309F1444BBA749B61D1DA799A494F5C

Uniqueness

Uniqueness Score: -1.00%

Function 00404683 Relevance: 3.0, APIs: 2, Instructions: 20memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,00403B63,00000000), ref: 00404694

Part of subcall function 00404A37: RtlAllocateHeap.NTDLL(00000000,00000140,004046A8), ref: 00404A44

HeapDestroy.KERNEL32 ref: 004046B2

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: Heap$AllocateCreateDestroy
String ID:
API String ID: 316229882-0
Opcode ID: b529439db7e07ea534753e5dd505f7efad80a7dff303fa21c44e8ba2b60a4040
Instruction ID: 9ddc651c384a72fcc8bbbb9fb6b64fc80d3b8357a1baf8a30aa09fcb334ba20b
Opcode Fuzzy Hash: b529439db7e07ea534753e5dd505f7efad80a7dff303fa21c44e8ba2b60a4040
Instruction Fuzzy Hash: EDE05BB4361301AAEB115B349D49BBA3AD4AB85792F01C87AF905D51E0FB7DC490991C

Uniqueness

Uniqueness Score: -1.00%

Function 0040379B Relevance: 3.0, APIs: 2, Instructions: 16fileCOMMON

Download Yara Rule

APIs

DeleteFileA.KERNELBASE(?,00402769,?), ref: 0040379F
GetLastError.KERNEL32 ref: 004037A9

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: DeleteErrorFileLast
String ID:
API String ID: 2018770650-0
Opcode ID: dbe72d997eb6c2d243ff8bee3b885996821ff43da3632a9baa193eefa62b0ff7
Instruction ID: 9c4c2552e0aa43cc01603a3fb1c28c40c25f81270c9d146e11811b071c8cdedc
Opcode Fuzzy Hash: dbe72d997eb6c2d243ff8bee3b885996821ff43da3632a9baa193eefa62b0ff7
Instruction Fuzzy Hash: 0ED0C9E026550296EA015F315E0921B3AAC6F507627958ABAA826F12E1EB38CA14A519

Uniqueness

Uniqueness Score: -1.00%

Function 00403D1E Relevance: 1.5, APIs: 1, Instructions: 21memoryCOMMON

Download Yara Rule

APIs

RtlFreeHeap.NTDLL(00000000,?,00000000,004037CE,?,00401EE8,00000000), ref: 00403D45

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 22c731757b1142beab6176de30feae75187bec65ecd1c046d2d7fbcad0bf9ae9
Instruction ID: 81e7dd66bc3a636d26e819c498fd3557b4744c3378aa58c4f367938c739c9a74
Opcode Fuzzy Hash: 22c731757b1142beab6176de30feae75187bec65ecd1c046d2d7fbcad0bf9ae9
Instruction Fuzzy Hash: 40D05E3264A6206AD5112A18BC02FEB2B5C9F91B21F15446FF4007A1E5CB3C9C8109DC

Uniqueness

Uniqueness Score: -1.00%

Function 00403C81 Relevance: 1.5, APIs: 1, Instructions: 21memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,?), ref: 00403CAF

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 27d190d87eb390a2e4b2e32f777bb7342ca319cf0b8b1bda9bdf53b3c12d4fd0
Instruction ID: 30c31515092504ca0bfbc9572f52f6af0897c4269d2eaf9da3154517631336a6
Opcode Fuzzy Hash: 27d190d87eb390a2e4b2e32f777bb7342ca319cf0b8b1bda9bdf53b3c12d4fd0
Instruction Fuzzy Hash: 5CE0C23381953096EA212B18BE057CB3A18AF01B65F060237FC44BB2E1C7386D4045DC

Uniqueness

Uniqueness Score: -1.00%

Function 00405185 Relevance: 1.3, APIs: 1, Instructions: 85memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(?,00008000,00001000,?,00000013,00000000,000000E0,?,?,00404EAB,000000E0,00000013,?,74D656E0,0040143F,?), ref: 004051D6

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 35503fca1021ab05d7b52264e6852854c2d22391e621d232ca43d378a29343d6
Instruction ID: 0271b84711de76720c0d7ff4873a7005d34d77c44ce78967c8b955fafef921a3
Opcode Fuzzy Hash: 35503fca1021ab05d7b52264e6852854c2d22391e621d232ca43d378a29343d6
Instruction Fuzzy Hash: 60317A316006069FD314CF18C884BA6BBE4FF54368F29C2BED1598B2E1D7749946CB44

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 004057EB Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 50libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.USER32(user32.dll,?,00000000,?,004049ED,?,Microsoft Visual C++ Runtime Library,00012010,?,00406844,?,00406894,?,?,?,Runtime Error!Program: ), ref: 004057FD
GetProcAddress.USER32(00000000,MessageBoxA,?,004049ED,?,Microsoft Visual C++ Runtime Library,00012010,?,00406844,?,00406894,?,?,?,Runtime Error!Program: ), ref: 00405815
GetProcAddress.USER32(00000000,GetActiveWindow,?,004049ED,?,Microsoft Visual C++ Runtime Library,00012010,?,00406844,?,00406894,?,?,?,Runtime Error!Program: ), ref: 00405826
GetProcAddress.USER32(00000000,GetLastActivePopup,?,004049ED,?,Microsoft Visual C++ Runtime Library,00012010,?,00406844,?,00406894,?,?,?,Runtime Error!Program: ), ref: 00405833

Strings

MessageBoxA, xrefs: 0040580F
GetActiveWindow, xrefs: 00405820
GetLastActivePopup, xrefs: 00405828
user32.dll, xrefs: 004057F8

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: GetActiveWindow$GetLastActivePopup$MessageBoxA$user32.dll
API String ID: 2238633743-4044615076
Opcode ID: 4083e126882c5ced38b2982ecdd0aa8fb8f6d206dbe6733fa578fa79caa5add0
Instruction ID: b69252d3eda3f5ce78422e4d92470a3ce5f88092df5f94a3546d82688f01e71e
Opcode Fuzzy Hash: 4083e126882c5ced38b2982ecdd0aa8fb8f6d206dbe6733fa578fa79caa5add0
Instruction Fuzzy Hash: 28017572740705DFC710AFB59C84A573EE9DB58740316843FA605F22A0DA78C825DF78

Uniqueness

Uniqueness Score: -1.00%

Function 004019E8 Relevance: 1.5, APIs: 1, Instructions: 41timeCOMMON

Download Yara Rule

APIs

GetSystemTime.KERNEL32(0000002E,0000002E,?,00000000,0000001E), ref: 004019F2

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: SystemTime
String ID:
API String ID: 2656138-0
Opcode ID: 058c2d7feba0809f327c2ad5695b26e8b15d94b3b1189f33cf0f95695adc544f
Instruction ID: 5509a1f7b8fd045947e4fd0e8f7848a75be2432affde2ac2507702c38ffbf4b2
Opcode Fuzzy Hash: 058c2d7feba0809f327c2ad5695b26e8b15d94b3b1189f33cf0f95695adc544f
Instruction Fuzzy Hash: D4010C24E21219A6CF14EB94C5585EDB3B4FF44348F40999AE412B73A0E3F99685CB89

Uniqueness

Uniqueness Score: -1.00%

Function 00401691 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e41a8d1ff456f707db322ebb239d32054a16201fa2e3cf21b69386307f83a213
Instruction ID: fdc676fa3bbf09f973ca31bbc1720d313cd6944ddd87bf46bbd657e027e79546
Opcode Fuzzy Hash: e41a8d1ff456f707db322ebb239d32054a16201fa2e3cf21b69386307f83a213
Instruction Fuzzy Hash: DA319233E285B207C324CEBA5C80066F7D1AB8E22674B87B9DD95FB251D139FD1186E4

Uniqueness

Uniqueness Score: -1.00%

Function 00401335 Relevance: 16.7, APIs: 11, Instructions: 196networkCOMMON

Download Yara Rule

APIs

htons.WS2_32(?), ref: 0040136A
htons.WS2_32(?), ref: 00401377
htons.WS2_32(?), ref: 00401381
htons.WS2_32(?), ref: 00401411
htons.WS2_32(00000000), ref: 00401421
htons.WS2_32(?), ref: 00401430
htons.WS2_32(00000000), ref: 00401463
htons.WS2_32(?), ref: 004014D2
htons.WS2_32(?), ref: 00401546

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: htons
String ID:
API String ID: 4207154920-0
Opcode ID: 3b681f48e5d0c725af44bdea3f5e9e1581bd8ae6c8751c1361cb48875ca40376
Instruction ID: 9b5c7b10500d90536ef99daddf581d525364c1f5c7a8bc25fbad06f6334030b0
Opcode Fuzzy Hash: 3b681f48e5d0c725af44bdea3f5e9e1581bd8ae6c8751c1361cb48875ca40376
Instruction Fuzzy Hash: 6661C47A804209ABCB14DFA4C8457EEBBB4FF04314F50446BE406B76A1D77CDA85CB98

Uniqueness

Uniqueness Score: -1.00%

Function 00405BB5 Relevance: 13.7, APIs: 9, Instructions: 177COMMON

Download Yara Rule

APIs

LCMapStringW.KERNEL32(00000000,00000100,004068D0,00000001,00000000,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?,00000000), ref: 00405BF7
LCMapStringA.KERNEL32(00000000,00000100,00417EE0,00000001,00000000,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?,00000000), ref: 00405C13
LCMapStringA.KERNEL32(?,00000100,00000020,00000001,00000000,00000100,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?,00000000), ref: 00405C5C
MultiByteToWideChar.KERNEL32(00000000,00000101,00000020,00000001,00000000,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?,00000000), ref: 00405C94
MultiByteToWideChar.KERNEL32(00000000,00000001,00000020,00000001,00000100,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?), ref: 00405CEC
LCMapStringW.KERNEL32(?,00000100,00000100,00000000,00000000,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?), ref: 00405D02
LCMapStringW.KERNEL32(?,00000100,00000100,00000000,00000000,00000100,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?), ref: 00405D35
LCMapStringW.KERNEL32(?,00000100,00000100,00000100,?,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?), ref: 00405D9D

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: String$ByteCharMultiWide
String ID:
API String ID: 352835431-0
Opcode ID: 8bb2a11c8592da06ff3adaae57ca199b6941de967179a06f560761e18254fef3
Instruction ID: 81b75aa7be9e3bfa6048845914e0abc472b891a7c2b0f3d519397b4cd530eeb0
Opcode Fuzzy Hash: 8bb2a11c8592da06ff3adaae57ca199b6941de967179a06f560761e18254fef3
Instruction Fuzzy Hash: 28517C31900609ABCF218F54DC49AEF7FB9FF49750F24812AF915B61A0D33989A0DF69

Uniqueness

Uniqueness Score: -1.00%

Function 004043A6 Relevance: 10.6, APIs: 7, Instructions: 132COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,00403B88), ref: 004043C1
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,00403B88), ref: 004043D5
GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,00403B88), ref: 00404401
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,00403B88), ref: 00404439
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,00403B88), ref: 0040445B
FreeEnvironmentStringsW.KERNEL32(00000000,?,00000000,?,?,?,?,00403B88), ref: 00404474
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,00403B88), ref: 00404487

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: EnvironmentStrings$ByteCharMultiWide$Free
String ID:
API String ID: 3512638745-0
Opcode ID: d26d06ecd7c4ffc8134835e528f208422d0f1f2bc766106d958cbaa5f9df33d0
Instruction ID: 5d972f26fcbcd176568d0505b3b115d55bd9c5a9d6aab9954fda4a9a130f43d6
Opcode Fuzzy Hash: d26d06ecd7c4ffc8134835e528f208422d0f1f2bc766106d958cbaa5f9df33d0
Instruction Fuzzy Hash: 7231F2F25042656FD7207FB49C84A3B7A8CE6C5358716063FFB42F3281EA398C558269

Uniqueness

Uniqueness Score: -1.00%

Function 004048C9 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 100fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(000000F4,00406844,00000000,?,00000000,00000000), ref: 00404A0C
WriteFile.KERNEL32(00000000), ref: 00404A13

Strings

Runtime Error!Program: , xrefs: 0040499C
Microsoft Visual C++ Runtime Library, xrefs: 004049E2
..., xrefs: 00404988
<program name unknown>, xrefs: 00404946

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: FileHandleWrite
String ID: ...$<program name unknown>$Microsoft Visual C++ Runtime Library$Runtime Error!Program:
API String ID: 3320372497-4022980321
Opcode ID: 74794024bdef46d4f1375075b0d2a88467e563281dfd164a22fa197795969e9e
Instruction ID: 9d75f8f840a33461f7636776d7fd5feb9408c1945f2d6d3db45423b93c088b80
Opcode Fuzzy Hash: 74794024bdef46d4f1375075b0d2a88467e563281dfd164a22fa197795969e9e
Instruction Fuzzy Hash: 413124F2A00218AEDB20EA61CC41F9B37ACEB84704F14447BF645F22C1E678DA408A6D

Uniqueness

Uniqueness Score: -1.00%

Function 00405280 Relevance: 9.1, APIs: 6, Instructions: 117COMMON

Download Yara Rule

APIs

GetStringTypeW.KERNEL32(00000001,004068D0,00000001,00000001,0000005D,00000000,00000001,?,00403894,004029CE,?,004029CE,00000000,?,?,74DEE070), ref: 004052BF
GetStringTypeA.KERNEL32(00000000,00000001,00417EE0,00000001,?,?,00403894,004029CE,?,004029CE,00000000,?,?,74DEE070,00417EE0), ref: 004052D9
GetStringTypeA.KERNEL32(00000001,004029CE,?,004029CE,00403894,0000005D,00000000,00000001,?,00403894,004029CE,?,004029CE,00000000), ref: 0040530D
MultiByteToWideChar.KERNEL32(?,00000001,?,004029CE,00000000,00000000,0000005D,00000000,00000001,?,00403894,004029CE,?,004029CE,00000000), ref: 00405345
MultiByteToWideChar.KERNEL32(?,00000001,?,004029CE,?,?,?,?,?,?,00403894,004029CE,?,004029CE), ref: 0040539B
GetStringTypeW.KERNEL32(004029CE,?,00000000,00403894,?,?,?,?,?,?,00403894,004029CE,?,004029CE), ref: 004053AD

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: StringType$ByteCharMultiWide
String ID:
API String ID: 3852931651-0
Opcode ID: 40b95dea3268905a436086882555c30f24bb0e1df8b30e35344bdaa847683b9a
Instruction ID: 690bf82c612f5ff1554cbd000954cf9474f10d0111165a3a49fad0687cfb2505
Opcode Fuzzy Hash: 40b95dea3268905a436086882555c30f24bb0e1df8b30e35344bdaa847683b9a
Instruction Fuzzy Hash: 23418072601619AFDF109F94CC85AEF3F79FB09790F11443AFA02E2290D37989548FA8

Uniqueness

Uniqueness Score: -1.00%

Function 0040564A Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 124COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,00000000), ref: 0040565E

Strings

, xrefs: 00405683
, xrefs: 004056A7

Memory Dump Source

Source File: 00000000.00000002.4111775357.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111713500.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000408000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.000000000040D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111775357.0000000000417000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112021400.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4112081756.000000000041A000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_webcam.jbxd

Similarity

API ID: Info
String ID: $
API String ID: 1807457897-3032137957
Opcode ID: c081bf661c354abefa7763bfaee9c21e390ceceb934d95a70fe9e7886496f980
Instruction ID: 89ad30dfa35e05781fa7074c5eb3ee28ffe96362e3dd6f032609885112832f97
Opcode Fuzzy Hash: c081bf661c354abefa7763bfaee9c21e390ceceb934d95a70fe9e7886496f980
Instruction Fuzzy Hash: 45416931100A9C9EEB168724CD49BFB3FE8DB06700F1404FAD549EB1D2C6794A48DFAA

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: winlogon.exePID: 2004, Parent PID: 2580COMMON

Execution Graph

Execution Coverage:	7.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	426
Total number of Limit Nodes:	3

Executed Functions

Function 004030F9 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 119
threadnetworksynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTickCount.KERNEL32 ref: 00403105
CreateMutexA.KERNELBASE(00000000,00000000,00000000), ref: 0040311C
GetLastError.KERNEL32 ref: 00403127
WSAStartup.WS2_32(00000101,?), ref: 00403149
CreateThread.KERNEL32(00000000,00000000,00402E37,00000000,00000000,?), ref: 004031A9
CreateThread.KERNEL32(00000000,00000000,Function_00003085,00000000,00000000,?), ref: 004031B8
InternetGetConnectedState.WININET(?,00000000), ref: 004031CA
GetExitCodeThread.KERNEL32(00000000,?), ref: 00403207
CreateThread.KERNEL32(00000000,00000000,Function_00001E62,0040DDC0,00000000,?), ref: 0040322B
InternetGetConnectedState.WININET(?,00000000), ref: 0040324F

Strings

jfkoofia@yahoo.com, xrefs: 00403162, 0040316D, 0040317F

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: CreateThread$ConnectedInternetState$CodeCountErrorExitLastMutexStartupTick
String ID: jfkoofia@yahoo.com
API String ID: 3592878312-1009674638
Opcode ID: 4db236c8f64a66a94e666b966866f959043465874e8551258ceb0bafea335d50
Instruction ID: a1bf2ff7ef5bceeac63f91e3b4f6e5b3c95491823722eaf96483bc5270944901
Opcode Fuzzy Hash: 4db236c8f64a66a94e666b966866f959043465874e8551258ceb0bafea335d50
Instruction Fuzzy Hash: C3418DB1940209AFEB00DFA0DD889AF7BBCEB08349F10447AF546F3291D7785E558B69

Uniqueness

Uniqueness Score: -1.00%

Function 00403B04 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 75
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVersion.KERNEL32 ref: 00403B2A

Part of subcall function 00404683: HeapCreate.KERNELBASE(00000000,00001000,00000000,00403B63,00000000), ref: 00404694
Part of subcall function 00404683: HeapDestroy.KERNEL32 ref: 004046B2

GetCommandLineA.KERNEL32 ref: 00403B78
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00403BC6

Strings

%n, xrefs: 00403B7E

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: Heap$CommandCreateDestroyHandleLineModuleVersion
String ID: %n
API String ID: 2736944706-2247426890
Opcode ID: c1a7a2cec080945146dc668cefc1699e97db2957981a3824a0b34371f317d2c6
Instruction ID: d46f6c68c26d4c1b299e5b91e5fb46e43711b55dc765b057d004a842d80414bb
Opcode Fuzzy Hash: c1a7a2cec080945146dc668cefc1699e97db2957981a3824a0b34371f317d2c6
Instruction Fuzzy Hash: 7A218EB1944714AADB04AFA6DC06AAE7BB9EF45705F10413EF601BB2D1DB3C4940CB59

Uniqueness

Uniqueness Score: -1.00%

Function 004050D4 Relevance: 4.6, APIs: 3, Instructions: 53
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,000041C4,00000013), ref: 00405130
VirtualAlloc.KERNELBASE(00000000,00100000,00002000,?), ref: 0040514A
HeapFree.KERNEL32(00000000,?), ref: 00405161

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: Heap$AllocAllocateFreeVirtual
String ID:
API String ID: 1702295773-0
Opcode ID: 85fe7fa33a580cbed554531df588a258a414acce59b53c0c872e434cf99fc004
Instruction ID: e0ef3e5d47e0e8a7737a84c02c4b327dd222423e0ed1cb0d0df2e217ac6451dd
Opcode Fuzzy Hash: 85fe7fa33a580cbed554531df588a258a414acce59b53c0c872e434cf99fc004
Instruction Fuzzy Hash: 0D113A34601A00AFC7228F19EC45AA77BB6FB857607108A7DE166DB1F1CB719851CF1C

Uniqueness

Uniqueness Score: -1.00%

Function 00403E11 Relevance: 4.5, APIs: 3, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(00403BDB,?,00403DFC,00000000,00000000,00000000,00403BDB,00000000), ref: 00403E21
TerminateProcess.KERNEL32(00000000,?,00403DFC,00000000,00000000,00000000,00403BDB,00000000), ref: 00403E28
ExitProcess.KERNEL32(00403BDB,?,00403DFC,00000000,00000000), ref: 00403EA2

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: ae18f8a63550fff8977e70903f57ef0a696ef6a67726d26ab723117cb14069b1
Instruction ID: d5f55bf5871efc9d605b963410fb5b019a0973ea18ec65a1aa8bf71409585c38
Opcode Fuzzy Hash: ae18f8a63550fff8977e70903f57ef0a696ef6a67726d26ab723117cb14069b1
Instruction Fuzzy Hash: ED01F9316443019ADB109F18FE85A5B7FACFB94762B11413FF480761E1CB39A941CAED

Uniqueness

Uniqueness Score: -1.00%

Function 00404683 Relevance: 3.0, APIs: 2, Instructions: 20
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,00403B63,00000000), ref: 00404694

Part of subcall function 00404A37: RtlAllocateHeap.NTDLL(00000000,00000140,004046A8), ref: 00404A44

HeapDestroy.KERNEL32 ref: 004046B2

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: Heap$AllocateCreateDestroy
String ID:
API String ID: 316229882-0
Opcode ID: b529439db7e07ea534753e5dd505f7efad80a7dff303fa21c44e8ba2b60a4040
Instruction ID: 9ddc651c384a72fcc8bbbb9fb6b64fc80d3b8357a1baf8a30aa09fcb334ba20b
Opcode Fuzzy Hash: b529439db7e07ea534753e5dd505f7efad80a7dff303fa21c44e8ba2b60a4040
Instruction Fuzzy Hash: EDE05BB4361301AAEB115B349D49BBA3AD4AB85792F01C87AF905D51E0FB7DC490991C

Uniqueness

Uniqueness Score: -1.00%

Function 00403C81 Relevance: 1.5, APIs: 1, Instructions: 21
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,?,?), ref: 00403CAF

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 27d190d87eb390a2e4b2e32f777bb7342ca319cf0b8b1bda9bdf53b3c12d4fd0
Instruction ID: 30c31515092504ca0bfbc9572f52f6af0897c4269d2eaf9da3154517631336a6
Opcode Fuzzy Hash: 27d190d87eb390a2e4b2e32f777bb7342ca319cf0b8b1bda9bdf53b3c12d4fd0
Instruction Fuzzy Hash: 5CE0C23381953096EA212B18BE057CB3A18AF01B65F060237FC44BB2E1C7386D4045DC

Uniqueness

Uniqueness Score: -1.00%

Function 00405185 Relevance: 1.3, APIs: 1, Instructions: 85
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,00008000,00001000,?,00000013,00000000,000000E0,?,?,00404EAB,000000E0,00000013,?,74D656E0,0040143F,?), ref: 004051D6

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 35503fca1021ab05d7b52264e6852854c2d22391e621d232ca43d378a29343d6
Instruction ID: 0271b84711de76720c0d7ff4873a7005d34d77c44ce78967c8b955fafef921a3
Opcode Fuzzy Hash: 35503fca1021ab05d7b52264e6852854c2d22391e621d232ca43d378a29343d6
Instruction Fuzzy Hash: 60317A316006069FD314CF18C884BA6BBE4FF54368F29C2BED1598B2E1D7749946CB44

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00402CEA Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 89fileCOMMON

Download Yara Rule

APIs

FindFirstFileA.KERNEL32(?,?), ref: 00402D25
FindNextFileA.KERNEL32(00000000,00000010), ref: 00402E1F

Part of subcall function 00402A51: _lopen.KERNEL32(?,00000000), ref: 00402AB8
Part of subcall function 00402A51: _hread.KERNEL32(?,?,00001000), ref: 00402AF4

Strings

., xrefs: 00402D5D
., xrefs: 00402D66
shar, xrefs: 00402DD2
\*.*, xrefs: 00402D09

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: FileFind$FirstNext_hread_lopen
String ID: .$.$\*.*$shar
API String ID: 2610364250-3271563406
Opcode ID: 17bfe433173d05b078ab22fbc6c5e0251c3b952f2a5661c611d3afa1f79ac6b2
Instruction ID: af0736c58c016ddeb0cabaee310bdccb81470b733d605c7cd839ae1c487058f6
Opcode Fuzzy Hash: 17bfe433173d05b078ab22fbc6c5e0251c3b952f2a5661c611d3afa1f79ac6b2
Instruction Fuzzy Hash: 14311E7284066C6ADF25AA65CD4DBDF766C6B04309F1404FBE609F21C1E6BC8BC44E69

Uniqueness

Uniqueness Score: -1.00%

Function 00403085 Relevance: 6.0, APIs: 4, Instructions: 37threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThread.KERNEL32 ref: 0040308D
SetThreadPriority.KERNEL32(00000000), ref: 00403094
GetLocalTime.KERNEL32(?), ref: 0040309E
Beep.KERNEL32 ref: 004030E9

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: Thread$BeepCurrentLocalPriorityTime
String ID:
API String ID: 3686384232-0
Opcode ID: fdba3ae7979aba323897c0d329bc27605f4b2cd2cd63e45208a44457f8ee10c2
Instruction ID: 666856a2101ccab237df132475821c9f98106921f9c098f37887d323279d59a2
Opcode Fuzzy Hash: fdba3ae7979aba323897c0d329bc27605f4b2cd2cd63e45208a44457f8ee10c2
Instruction Fuzzy Hash: 28F08C20D41205AACF10BFA0D90E87E7A7DAB0031AF11C52BA152721D2ABB90BC4836E

Uniqueness

Uniqueness Score: -1.00%

Function 00402EA0 Relevance: 43.9, APIs: 4, Strings: 21, Instructions: 156
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetWindowsDirectoryA.KERNEL32(?,00000400), ref: 00402ECA
RegOpenKeyA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Run,?), ref: 00402F45
RegSetValueExA.ADVAPI32(?,ICQ Net,00000000,00000001,?,00000000), ref: 00402F6B
RegCloseKey.ADVAPI32(?), ref: 00402F74

Part of subcall function 00402E72: RegOpenKeyA.ADVAPI32(?,?,?), ref: 00402E7F
Part of subcall function 00402E72: RegDeleteValueA.ADVAPI32(?,?), ref: 00402E8F
Part of subcall function 00402E72: RegCloseKey.ADVAPI32(?), ref: 00402E98

Strings

SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xrefs: 00402F38, 00402F43, 00402F80, 00402F8D, 00402F99, 00402FA5, 00402FC4, 00402FD0, 00402FDC, 00402FF8, 00403004, 00403013, 0040301F, 0040302B, 00403037, 00403043, 0040306A, 00403076
DELETE ME, xrefs: 00402FFF
d3dupdate.exe, xrefs: 0040300E
Explorer, xrefs: 00402F94, 00402FA0
winlogon.exe, xrefs: 00402F00
System\CurrentControlSet\Services\WksPatch , xrefs: 00403059
\, xrefs: 00402EDC
CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32, xrefs: 00402FAF
system., xrefs: 00402FD7, 00402FE3
Sentry, xrefs: 0040303E
ICQ Net, xrefs: 00402F63
KasperskyAv, xrefs: 00402FBF, 00402FCB
Taskmon, xrefs: 00402F7A, 00402F7F, 00402F87
Windows Services Host, xrefs: 00403065, 00403071
msgsvr32, xrefs: 00402FF3
OLE, xrefs: 00403032
service, xrefs: 00403026
-stealth, xrefs: 00402F28
Software\Microsoft\Windows\CurrentVersion\Explorer\PINF, xrefs: 0040304D
au.exe, xrefs: 0040301A
SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, xrefs: 00402FE8

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: CloseOpenValue$DeleteDirectoryWindows
String ID: -stealth$CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32$DELETE ME$Explorer$ICQ Net$KasperskyAv$OLE$SOFTWARE\Microsoft\Windows\CurrentVersion\Run$SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices$Sentry$Software\Microsoft\Windows\CurrentVersion\Explorer\PINF$System\CurrentControlSet\Services\WksPatch $Taskmon$Windows Services Host$\$au.exe$d3dupdate.exe$msgsvr32$service$system.$winlogon.exe
API String ID: 4164969765-2502385722
Opcode ID: 3e919cdd1f604cd2d3d721d2b75f27e015d90c453604e91f09a279d551d168de
Instruction ID: 84feb7293dd50699fc8e53e7ee761e706d635917d92738f507599102555b4bc5
Opcode Fuzzy Hash: 3e919cdd1f604cd2d3d721d2b75f27e015d90c453604e91f09a279d551d168de
Instruction Fuzzy Hash: 174184A25C031475C620B772CD4EF9B3A6CDF65759F60007BBA09710C2CABC991046FE

Uniqueness

Uniqueness Score: -1.00%

Function 004010A4 Relevance: 29.9, APIs: 15, Strings: 2, Instructions: 150
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getservbyname.WS2_32(nameserver,UDP), ref: 004010FF
htons.WS2_32(00000035), ref: 00401111
inet_addr.WS2_32(?), ref: 0040111A
gethostbyname.WS2_32(?), ref: 0040112B
socket.WS2_32(00000002,00000002,00000000), ref: 00401144
htons.WS2_32(000011DF), ref: 00401164
htons.WS2_32(00000001), ref: 00401176
htons.WS2_32(00000002), ref: 004011B6
htons.WS2_32(00000001), ref: 004011C2
setsockopt.WS2_32(?,0000FFFF,00001006,?,?), ref: 004011ED
setsockopt.WS2_32(?,0000FFFF,00001005,00000FA0,?), ref: 004011FF
sendto.WS2_32(?,00000000,-00000010,00000000,00000002,00000010), ref: 00401215
recvfrom.WS2_32(?,?,00000800,00000000,00000002,?), ref: 00401238
WSAGetLastError.WS2_32 ref: 00401243
closesocket.WS2_32(?), ref: 0040125B

Strings

nameserver, xrefs: 004010FA
UDP, xrefs: 004010F5

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: htons$setsockopt$ErrorLastclosesocketgethostbynamegetservbynameinet_addrrecvfromsendtosocket
String ID: UDP$nameserver
API String ID: 2147619886-4175462922
Opcode ID: c2c4ea1a7d312aeaef9fa15988cadba241fcaab0d9df87588d876636e5593e70
Instruction ID: 54f4538c7bcc46d7fdc4aaefdd6ffe4718887d5174617e4dee6c76f625f832c1
Opcode Fuzzy Hash: c2c4ea1a7d312aeaef9fa15988cadba241fcaab0d9df87588d876636e5593e70
Instruction Fuzzy Hash: F251C331500258AADB10AF64DC45BDEB7B9FF04320F204276FA56FA2E1DBB44A518BD9

Uniqueness

Uniqueness Score: -1.00%

Function 00402A51 Relevance: 22.9, APIs: 4, Strings: 9, Instructions: 169
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_lopen.KERNEL32(?,00000000), ref: 00402AB8
_hread.KERNEL32(?,?,00001000), ref: 00402AF4
_llseek.KERNEL32(?,?,00000000), ref: 00402C1E
_lclose.KERNEL32(?), ref: 00402C4D

Strings

.msg, xrefs: 00402B79
.dbx, xrefs: 00402BB2
.tbb, xrefs: 00402B38
.adb, xrefs: 00402B4F
~A, xrefs: 00402ACA
.doc, xrefs: 00402B9F
.wab, xrefs: 00402B66
.oft, xrefs: 00402B8C
.sht, xrefs: 00402B21

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: _hread_lclose_llseek_lopen
String ID: .adb$.dbx$.doc$.msg$.oft$.sht$.tbb$.wab$~A
API String ID: 2871481721-694717425
Opcode ID: f997f1769d21b2a8984a50a65d8a8aa9511750919e931a6c6a8c0fd5281e9e5e
Instruction ID: f2dafe6271f346f72b0dcdc4685929b99cb8ccfb922ebbe08748fce3a86fe255
Opcode Fuzzy Hash: f997f1769d21b2a8984a50a65d8a8aa9511750919e931a6c6a8c0fd5281e9e5e
Instruction Fuzzy Hash: 9651D676600209BAEF15EFA1DE49ADE7B7CDF04326F2041BBF400B10D1DBB89E904A18

Uniqueness

Uniqueness Score: -1.00%

Function 004017AD Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 201
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004019E8: GetSystemTime.KERNEL32(0000001E,0000001E), ref: 004019F2

Part of subcall function 00401A6D: SetFilePointer.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,0041A051), ref: 00401A81
Part of subcall function 00401A6D: ReadFile.KERNEL32(?,?,00000400,?,00000000), ref: 00401AA8
Part of subcall function 00401A6D: SetFilePointer.KERNEL32(?,00000000,00000000,00000000), ref: 00401AE6

GetFileSize.KERNEL32(?,00000000), ref: 00401891
GetFileSize.KERNEL32(?,00000000), ref: 0040189D
WriteFile.KERNEL32(00000000,04034B50,0000001E,?,00000000), ref: 004018D5
WriteFile.KERNEL32(?,?,00000000), ref: 004018E8
SetFilePointer.KERNEL32(?,00000000,00000000,00000000), ref: 004018FB
ReadFile.KERNEL32(?,?,00000400,?,00000000), ref: 00401918
WriteFile.KERNEL32(?,?,?,?,00000000), ref: 00401939
WriteFile.KERNEL32(?,?,0000002E,?,00000000), ref: 0040196F
WriteFile.KERNEL32(?,?,00000000), ref: 00401982
WriteFile.KERNEL32(?,06054B50,00000016,?,00000000), ref: 004019C3

Strings

, xrefs: 00401968

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: File$Write$Pointer$ReadSize$SystemTime
String ID:
API String ID: 1177281838-3916222277
Opcode ID: aab24eb8617f8d725d7d8e24e7180a7e7e8e5969de52de2914c22b74f2718137
Instruction ID: b2c603c1d1320f768cb9f7d01f3a84518a27657aa67346375d6e3d71cd624553
Opcode Fuzzy Hash: aab24eb8617f8d725d7d8e24e7180a7e7e8e5969de52de2914c22b74f2718137
Instruction Fuzzy Hash: 6071267590121CBADF11DFA1CC84EDFBBB9FF08350F10412AF914AA2A0D7359A54CBA8

Uniqueness

Uniqueness Score: -1.00%

Function 00401335 Relevance: 16.7, APIs: 11, Instructions: 196
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

htons.WS2_32(?), ref: 0040136A
htons.WS2_32(?), ref: 00401377
htons.WS2_32(?), ref: 00401381
htons.WS2_32(?), ref: 00401411
htons.WS2_32(00000000), ref: 00401421
htons.WS2_32(?), ref: 00401430
htons.WS2_32(00000000), ref: 00401463
htons.WS2_32(?), ref: 004014D2
htons.WS2_32(?), ref: 00401546

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: htons
String ID:
API String ID: 4207154920-0
Opcode ID: 3b681f48e5d0c725af44bdea3f5e9e1581bd8ae6c8751c1361cb48875ca40376
Instruction ID: 9b5c7b10500d90536ef99daddf581d525364c1f5c7a8bc25fbad06f6334030b0
Opcode Fuzzy Hash: 3b681f48e5d0c725af44bdea3f5e9e1581bd8ae6c8751c1361cb48875ca40376
Instruction Fuzzy Hash: 6661C47A804209ABCB14DFA4C8457EEBBB4FF04314F50446BE406B76A1D77CDA85CB98

Uniqueness

Uniqueness Score: -1.00%

Function 004057EB Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 50
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.USER32(user32.dll,?,00000000,?,004049ED,?,Microsoft Visual C++ Runtime Library,00012010,?,00406844,?,00406894,?,?,?,Runtime Error!Program: ), ref: 004057FD
GetProcAddress.USER32(00000000,MessageBoxA,?,004049ED,?,Microsoft Visual C++ Runtime Library,00012010,?,00406844,?,00406894,?,?,?,Runtime Error!Program: ), ref: 00405815
GetProcAddress.USER32(00000000,GetActiveWindow,?,004049ED,?,Microsoft Visual C++ Runtime Library,00012010,?,00406844,?,00406894,?,?,?,Runtime Error!Program: ), ref: 00405826
GetProcAddress.USER32(00000000,GetLastActivePopup,?,004049ED,?,Microsoft Visual C++ Runtime Library,00012010,?,00406844,?,00406894,?,?,?,Runtime Error!Program: ), ref: 00405833

Strings

MessageBoxA, xrefs: 0040580F
GetLastActivePopup, xrefs: 00405828
GetActiveWindow, xrefs: 00405820
user32.dll, xrefs: 004057F8

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: GetActiveWindow$GetLastActivePopup$MessageBoxA$user32.dll
API String ID: 2238633743-4044615076
Opcode ID: 4083e126882c5ced38b2982ecdd0aa8fb8f6d206dbe6733fa578fa79caa5add0
Instruction ID: b69252d3eda3f5ce78422e4d92470a3ce5f88092df5f94a3546d82688f01e71e
Opcode Fuzzy Hash: 4083e126882c5ced38b2982ecdd0aa8fb8f6d206dbe6733fa578fa79caa5add0
Instruction Fuzzy Hash: 28017572740705DFC710AFB59C84A573EE9DB58740316843FA605F22A0DA78C825DF78

Uniqueness

Uniqueness Score: -1.00%

Function 00405BB5 Relevance: 13.7, APIs: 9, Instructions: 177COMMON

Download Yara Rule

APIs

LCMapStringW.KERNEL32(00000000,00000100,004068D0,00000001,00000000,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?,00000000), ref: 00405BF7
LCMapStringA.KERNEL32(00000000,00000100,00417EE0,00000001,00000000,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?,00000000), ref: 00405C13
LCMapStringA.KERNEL32(?,00000100,00000020,00000001,00000000,00000100,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?,00000000), ref: 00405C5C
MultiByteToWideChar.KERNEL32(00000000,00000101,00000020,00000001,00000000,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?,00000000), ref: 00405C94
MultiByteToWideChar.KERNEL32(00000000,00000001,00000020,00000001,00000100,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?), ref: 00405CEC
LCMapStringW.KERNEL32(?,00000100,00000100,00000000,00000000,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?), ref: 00405D02
LCMapStringW.KERNEL32(?,00000100,00000100,00000000,00000000,00000100,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?), ref: 00405D35
LCMapStringW.KERNEL32(?,00000100,00000100,00000100,?,00000000,?,00000100,00000000,00000100,00000000,00000001,00000020,00000100,?), ref: 00405D9D

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: String$ByteCharMultiWide
String ID:
API String ID: 352835431-0
Opcode ID: 8bb2a11c8592da06ff3adaae57ca199b6941de967179a06f560761e18254fef3
Instruction ID: 81b75aa7be9e3bfa6048845914e0abc472b891a7c2b0f3d519397b4cd530eeb0
Opcode Fuzzy Hash: 8bb2a11c8592da06ff3adaae57ca199b6941de967179a06f560761e18254fef3
Instruction Fuzzy Hash: 28517C31900609ABCF218F54DC49AEF7FB9FF49750F24812AF915B61A0D33989A0DF69

Uniqueness

Uniqueness Score: -1.00%

Function 004043A6 Relevance: 10.6, APIs: 7, Instructions: 132COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,00403B88), ref: 004043C1
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,00403B88), ref: 004043D5
GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,00403B88), ref: 00404401
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,00403B88), ref: 00404439
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,00403B88), ref: 0040445B
FreeEnvironmentStringsW.KERNEL32(00000000,?,00000000,?,?,?,?,00403B88), ref: 00404474
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,00403B88), ref: 00404487

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: EnvironmentStrings$ByteCharMultiWide$Free
String ID:
API String ID: 3512638745-0
Opcode ID: d26d06ecd7c4ffc8134835e528f208422d0f1f2bc766106d958cbaa5f9df33d0
Instruction ID: 5d972f26fcbcd176568d0505b3b115d55bd9c5a9d6aab9954fda4a9a130f43d6
Opcode Fuzzy Hash: d26d06ecd7c4ffc8134835e528f208422d0f1f2bc766106d958cbaa5f9df33d0
Instruction Fuzzy Hash: 7231F2F25042656FD7207FB49C84A3B7A8CE6C5358716063FFB42F3281EA398C558269

Uniqueness

Uniqueness Score: -1.00%

Function 004048C9 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 100fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(000000F4,00406844,00000000,?,00000000,00000000), ref: 00404A0C
WriteFile.KERNEL32(00000000), ref: 00404A13

Strings

Microsoft Visual C++ Runtime Library, xrefs: 004049E2
<program name unknown>, xrefs: 00404946
Runtime Error!Program: , xrefs: 0040499C
..., xrefs: 00404988

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: FileHandleWrite
String ID: ...$<program name unknown>$Microsoft Visual C++ Runtime Library$Runtime Error!Program:
API String ID: 3320372497-4022980321
Opcode ID: 74794024bdef46d4f1375075b0d2a88467e563281dfd164a22fa197795969e9e
Instruction ID: 9d75f8f840a33461f7636776d7fd5feb9408c1945f2d6d3db45423b93c088b80
Opcode Fuzzy Hash: 74794024bdef46d4f1375075b0d2a88467e563281dfd164a22fa197795969e9e
Instruction Fuzzy Hash: 413124F2A00218AEDB20EA61CC41F9B37ACEB84704F14447BF645F22C1E678DA408A6D

Uniqueness

Uniqueness Score: -1.00%

Function 00405280 Relevance: 9.1, APIs: 6, Instructions: 117COMMON

Download Yara Rule

APIs

GetStringTypeW.KERNEL32(00000001,004068D0,00000001,00000001,0000005D,00000000,00000001,?,00403894,004029CE,?,004029CE,00000000), ref: 004052BF
GetStringTypeA.KERNEL32(00000000,00000001,00417EE0,00000001,?,?,00403894,004029CE,?,004029CE,00000000), ref: 004052D9
GetStringTypeA.KERNEL32(00000001,004029CE,?,004029CE,00403894,0000005D,00000000,00000001,?,00403894,004029CE,?,004029CE,00000000), ref: 0040530D
MultiByteToWideChar.KERNEL32(?,00000001,?,004029CE,00000000,00000000,0000005D,00000000,00000001,?,00403894,004029CE,?,004029CE,00000000), ref: 00405345
MultiByteToWideChar.KERNEL32(?,00000001,?,004029CE,?,?,?,?,?,?,00403894,004029CE,?,004029CE), ref: 0040539B
GetStringTypeW.KERNEL32(004029CE,?,00000000,00403894,?,?,?,?,?,?,00403894,004029CE,?,004029CE), ref: 004053AD

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: StringType$ByteCharMultiWide
String ID:
API String ID: 3852931651-0
Opcode ID: 40b95dea3268905a436086882555c30f24bb0e1df8b30e35344bdaa847683b9a
Instruction ID: 690bf82c612f5ff1554cbd000954cf9474f10d0111165a3a49fad0687cfb2505
Opcode Fuzzy Hash: 40b95dea3268905a436086882555c30f24bb0e1df8b30e35344bdaa847683b9a
Instruction Fuzzy Hash: 23418072601619AFDF109F94CC85AEF3F79FB09790F11443AFA02E2290D37989548FA8

Uniqueness

Uniqueness Score: -1.00%

Function 00401B67 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 88timeCOMMON

Download Yara Rule

APIs

GetLocalTime.KERNEL32(?), ref: 00401BF9
GetTimeZoneInformation.KERNEL32(00000000), ref: 00401C0D
wsprintfA.USER32 ref: 00401CA5

Strings

%s, %u %s %u %.2u:%.2u:%.2u %s%.2u%.2u, xrefs: 00401C9D

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: Time$InformationLocalZonewsprintf
String ID: %s, %u %s %u %.2u:%.2u:%.2u %s%.2u%.2u
API String ID: 1715792076-4076198852
Opcode ID: 4a9d39a1a4b49a15a0af5199b82552f90bc8b5fc0a2882355a9521fa874379f6
Instruction ID: a1fd622096a8bf0a5f403f72d1136a8b65eff9f0f4c68601542a21ac2b23e156
Opcode Fuzzy Hash: 4a9d39a1a4b49a15a0af5199b82552f90bc8b5fc0a2882355a9521fa874379f6
Instruction Fuzzy Hash: CD3121B0D003189ACF10DFC5D8085EEBBF6EF05718F00806AE655B6290D3BC59A5CB5E

Uniqueness

Uniqueness Score: -1.00%

Function 0040156C Relevance: 6.1, APIs: 4, Instructions: 108memorynetworkCOMMON

Download Yara Rule

APIs

GlobalAlloc.KERNEL32(00000040,00000248), ref: 0040159F
GetNetworkParams.IPHLPAPI(00000000,?), ref: 004015AB
GlobalAlloc.KERNEL32(00000040,?), ref: 004015C1
GetNetworkParams.IPHLPAPI(00000000,?), ref: 004015CA

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: AllocGlobalNetworkParams
String ID:
API String ID: 3514119424-0
Opcode ID: 64ea287f31f8f70f9e455f5829afd25059ed4c5d428ddc10713d94c60fd5a4de
Instruction ID: c581374ef95c225fa66d458b5d7b2084ae11338eb7f1df88d1f5ced31a198c6c
Opcode Fuzzy Hash: 64ea287f31f8f70f9e455f5829afd25059ed4c5d428ddc10713d94c60fd5a4de
Instruction Fuzzy Hash: 0A31E676900214ABDB11DBA0CC45FDA77ECAF40750F0940B6EA45F72A1DB799E848B98

Uniqueness

Uniqueness Score: -1.00%

Function 0040564A Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 124COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,00000000), ref: 0040565E

Strings

, xrefs: 00405683
, xrefs: 004056A7

Memory Dump Source

Source File: 00000001.00000002.1749715538.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.1749700413.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000408000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749715538.0000000000418000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749760003.0000000000419000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.1749772339.000000000041A000.00000040.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_winlogon.jbxd

Similarity

API ID: Info
String ID: $
API String ID: 1807457897-3032137957
Opcode ID: c081bf661c354abefa7763bfaee9c21e390ceceb934d95a70fe9e7886496f980
Instruction ID: 89ad30dfa35e05781fa7074c5eb3ee28ffe96362e3dd6f032609885112832f97
Opcode Fuzzy Hash: c081bf661c354abefa7763bfaee9c21e390ceceb934d95a70fe9e7886496f980
Instruction Fuzzy Hash: 45416931100A9C9EEB168724CD49BFB3FE8DB06700F1404FAD549EB1D2C6794A48DFAA

Uniqueness

Uniqueness Score: -1.00%