File: c23c9bda9a7f9ae804e00544065ae334
Metadata
| Windows 7 key - Activation - Mobily.txt | |
| Non-ISO extended-ASCII text, with CRLF line terminators | 158 bytes |
| 2016-10-25 20:10:58 | |
| c23c9bda9a7f9ae804e00544065ae334 | |
| 8bba137d107a699bb5ae2494aabb6b4e75d33fd9 | |
| 787dcdebf05dbddfd3e97943b8d323c0a24765f1d4eaca4d3642454ce5acaa14 | |
| 6cd08ec67c455122b2d30ae00995f6b397732c96d02dfdd576c2789afaf36ca62ad6f12b0c169e299a0ece66504daae3b25b8bc88f00313070304c4648e84c66 | |
| 3:mR1IuAWoowvotJtzXapc9Gd3NSWSoMUl4TX:TriJBXYdUWdMUl4TX | |
| N/A | |
| N/A | |
APTNotes
Cyber threat intelligence reports associated with c23c9bda9a7f9ae804e00544065ae334.
Cyber threat intelligence reports associated with c23c9bda9a7f9ae804e00544065ae334.
Domains
Domains the malware sample communicates with.
Domains the malware sample communicates with.
Hosts
Hosts the malware sample communicates with.
Hosts the malware sample communicates with.
HTTP Requests
HTTP requests the malware sample makes.
HTTP requests the malware sample makes.
AV Detections
AV detection names associated with the malware sample.
AV detection names associated with the malware sample.
Mutants
Mutants created by the malware sample.
Mutants created by the malware sample.
Registry keys
Registry keys created by the malware sample.
Registry keys created by the malware sample.
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor |
| HKEY_CURRENT_USER\Software\Microsoft\Command Processor |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups |
| HKEY_CURRENT_USER\Software\Microsoft\Notepad |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\IMM |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\SystemShared |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\NOTEPAD.EXE |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{20D04FE0-3AEA-1069-A2D8-08002B30309D} |
| HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32 |
| HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions |
| HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9} |
| HKEY_CLASSES_ROOT\Directory |
| HKEY_CLASSES_ROOT\Directory\CurVer |
| HKEY_CLASSES_ROOT\Directory\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| HKEY_CLASSES_ROOT\Directory\\ShellEx\IconHandler |
| HKEY_CLASSES_ROOT\Directory\\Clsid |
| HKEY_CLASSES_ROOT\Folder |
| HKEY_CLASSES_ROOT\Folder\Clsid |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt |
| HKEY_CLASSES_ROOT\.txt |
| HKEY_CLASSES_ROOT\txtfile |
| HKEY_CLASSES_ROOT\txtfile\CurVer |
| HKEY_CLASSES_ROOT\txtfile\ |
| HKEY_CLASSES_ROOT\txtfile\\ShellEx\IconHandler |
| HKEY_CLASSES_ROOT\SystemFileAssociations\.txt |
| HKEY_CLASSES_ROOT\SystemFileAssociations\text |
| HKEY_CLASSES_ROOT\SystemFileAssociations\text\ShellEx\IconHandler |
| HKEY_CLASSES_ROOT\txtfile\\Clsid |
| HKEY_CLASSES_ROOT\SystemFileAssociations\text\Clsid |
| HKEY_CLASSES_ROOT\* |
| HKEY_CLASSES_ROOT\*\Clsid |
| HKEY_CURRENT_USER\Keyboard Layout\Toggle |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF\LangBarAddIn\ |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\LangBarAddIn\ |
Comments
User comments about c23c9bda9a7f9ae804e00544065ae334.
User comments about c23c9bda9a7f9ae804e00544065ae334.
