PC infected by URL:Phishing - Virus, Trojan, Spyware, and Malware Removal Help
Tags
country: France Norway
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Active Setup - T1547.014 Control Panel - T1218.002 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Python - T1059.006 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Sharepoint - T1213.002 Software - T1592.002 Tool - T1588.002 Connection Proxy - T1090 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID 5e8b787c-70cc-4cab-a293-7663ceb93d26
Fingerprint 35743b28faeea6c3
Analysis status DONE
Considered CTI value 1
Text language
Published Aug. 6, 2023, 7:51 p.m.
Added to db Aug. 7, 2023, 8:26 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline PC infected by URL:Phishing
Title PC infected by URL:Phishing - Virus, Trojan, Spyware, and Malware Removal Help
Detected Hints/Tags/Attributes 114/3/529
Source URLs
Redirection Url
Details Source https://www.bleepingcomputer.com/forums/t/788353/pc-infected-by-urlphishing/
URL Provider
Details Provider Source level domain
Details bleepingcomputer.com www.bleepingcomputer.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
from.it
Details Domain 2 
parsec.app
Details Domain 2 
sfr.fr
Details Domain 88 
www.bing.com
Details Domain 22 
mozilla.org
Details Domain 1 
celtx.com
Details Domain 57 
adobe.com
Details Domain 368 
microsoft.com
Details Domain 1 
update.avastbrowser.com
Details Domain 37 
videolan.org
Details Domain 7 
calendar.google.com
Details Domain 1 
csgo500.com
Details Domain 194 
drive.google.com
Details Domain 1 
forum.conseil-config.com
Details Domain 49 
mail.google.com
Details Domain 1 
menfield.shop
Details Domain 9 
www.netflix.com
Details Domain 18 
gog.com
Details Domain 9 
insecure.com
Details Domain 87 
regid.1991-06.com.microsoft
Details Domain 51 
battle.net
Details Domain 1 
convertavitomp4.com
Details Domain 1 
bacon.live
Details Domain 2 
miktex.org
Details Domain 1 
mikebethany.com
Details Domain 3 
op.gg
Details Domain 1 
plays.tv
Details Domain 8 
valorant.live
Details Domain 52 
www.wireshark.org
Details Domain 50 
microsoft.photos
Details Domain 1 
eeins.de
Details Domain 79 
www.openssl.org
Details Domain 1 
fr.search.yahoo.com
Details Domain 19 
sharepoint.com
Details Domain 1 
axteragv-files.sharepoint.com
Details Domain 1 
nicopc.mshome.net
Details Domain 1 
keyid-907d65e9b562315997dd5ad086b2b7598957b92c.microsoftaik.azure.net
Details Domain 2 
amd-keyid-907d65e9b562315997dd5ad086b2b7598957b92c.microsoftaik.azure.net
Details Domain 64 
go.microsoft.com
Details Email 1 
adobeaamupdater-1.0-microsoftaccount-nicoklein@sfr.fr
Details Email 1 
sp@avast.com.xpi
Details Email 1 
alendar-timezones@mozilla.org
Details Email 1 
default-palette@celtx.com
Details Email 1 
inspector@mozilla.org
Details File 1 
c:\users\nicolas\downloads\frst64english.exe
Details File 7 
adobeipcbroker.exe
Details File 8 
c:\program files\avast software\avast\avastui.exe
Details File 1 
ensserver.exe
Details File 1 
aliyunwrapexe.exe
Details File 2 
c:\program files\elgato\streamdeck\streamdeck.exe
Details File 1 
c:\program files\elgato\streamdeck\qtwebengineprocess.exe
Details File 46 
c:\program files\malwarebytes\anti-malware\mbamservice.exe
Details File 39 
c:\program files\malwarebytes\anti-malware\mbamtray.exe
Details File 27 
c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe
Details File 127 
c:\windows\system32\rundll32.exe
Details File 14 
c:\program files\nvidia corporation\nvidia geforce experience\nvidia share.exe
Details File 13 
c:\program files\nvidia corporation\shadowplay\nvsphelper64.exe
Details File 4 
c:\riot games\riot client\riotclientservices.exe
Details File 2 
c:\riot games\riot client\riotclientcrashhandler.exe
Details File 1 
c:\users\nicolas\appdata\local\programs\opera gx\opera.exe
Details File 35 
discord.exe
Details File 8 
opera_crashreporter.exe
Details File 1260 
explorer.exe
Details File 1 
c:\program files\avast software\cleanup\tuneupui.exe
Details File 10 
crashpad_handler.exe
Details File 1 
c:\program files\logitech gaming software\lcore.exe
Details File 5 
c:\program files\riot vanguard\vgtray.exe
Details File 1 
c:\windows\system32\spool\drivers\x64\3\e_yativce.exe
Details File 1 
c:\users\nicolas\appdata\roaming\spotify\spotify.exe
Details File 2 
voicemeeterpro.exe
Details File 35 
googlecrashhandler.exe
Details File 33 
googlecrashhandler64.exe
Details File 1 
c:\users\nicolas\appdata\local\microsoft\teams\current\teams.exe
Details File 674 
node.js
Details File 31 
helper.exe
Details File 4 
eeventmanager.exe
Details File 306 
services.exe
Details File 11 
adobeupdateservice.exe
Details File 38 
armsvc.exe
Details File 16 
c:\program files\bonjour\mdnsresponder.exe
Details File 8 
c:\program files\common files\apple\mobile device support\applemobiledeviceservice.exe
Details File 2 
c:\program files\avast software\avast\afwserv.exe
Details File 4 
c:\program files\avast software\avast\aswidsagent.exe
Details File 4 
c:\program files\avast software\avast\aswtoolssvc.exe
Details File 5 
c:\program files\avast software\avast\avastsvc.exe
Details File 5 
c:\program files\avast software\avast\wsc_proxy.exe
Details File 2 
c:\program files\avast software\cleanup\tuneupsvc.exe
Details File 15 
gameinputsvc.exe
Details File 29 
c:\program files\common files\microsoft shared\clicktorun\officeclicktorun.exe
Details File 4 
c:\windows\system32\corsairgamingaudiocfgservice64.exe
Details File 13 
c:\windows\system32\driverstore\filerepository\nv_dispi.inf
Details File 44 
container.exe
Details File 35 
c:\windows\system32\driverstore\filerepository\realtekservice.inf
Details File 35 
rtkauduservice64.exe
Details File 2 
c:\windows\syswow64\vmnat.exe
Details File 3 
c:\windows\syswow64\vmnetdhcp.exe
Details File 1122 
svchost.exe
Details File 5 
adobenotificationclient.exe
Details File 13 
hxoutlook.exe
Details File 19 
hxtsr.exe
Details File 85 
c:\windows\system32\dllhost.exe
Details File 67 
c:\windows\system32\smartscreen.exe
Details File 3 
c:\windows\system32\wbem\wmiadap.exe
Details File 41 
avastui.exe
Details File 4 
c:\program files\avast software\avast\avlaunch.exe
Details File 12 
updaterstartuputility.exe
Details File 11 
agcinvokerutility.exe
Details File 2 
tuneupui.exe
Details File 4 
c:\program files\corsair\corsair icue 4 software\icue launcher.exe
Details File 7 
c:\program files\itunes\ituneshelper.exe
Details File 8 
c:\program files\adobe\adobe creative cloud\acc\creative cloud.exe
Details File 7 
googledrivefs.exe
Details File 6 
overwolflauncher.exe
Details File 1 
c:\users\nicholas\appdata\roaming\spotify\spotify.exe
Details File 1 
c:\program files\google\drive\googledrivesync.exe
Details File 5 
icloudservices.exe
Details File 2 
iclouddrive.exe
Details File 1 
d:\program files\steam\steam.exe
Details File 6 
c:\program files\adobe\adobe creative cloud experience\ccxprocess.exe
Details File 1 
confagent.exe
Details File 1 
c:\users\nicolas\appdata\local\medal\update.exe
Details File 1 
c:\program files\bakkesmod\bakkesmod.exe
Details File 87 
skype.exe
Details File 3 
c:\program files\parsec\parsecd.exe
Details File 6 
avastbrowser.exe
Details File 1 
c:\users\nicholas\appdata\local\programs\opera gx\assistant\ browser_assistant.exe
Details File 1 
c:\users\nicholas\appdata\local\programs\opera gx\launcher.exe
Details File 1 
c:\users\nicolas\appdata\local\discord\update.exe
Details File 1 
c:\users\nicolas\appdata\local\microsoft\teams\ update.exe
Details File 1 
c:\windows\system32\e_ylmbvce.dll
Details File 1 
c:\windows\system32\e_ylmbrde.dll
Details File 8 
c:\windows\system32\enppmon.dll
Details File 61 
chrmstp.exe
Details File 1 
c:\windows\system32\mscories.dll
Details File 18 
c:\windows\syswow64\rundll32.exe
Details File 1 
c:\windows\syswow64\mscories.dll
Details File 7 
onenotem.exe
Details File 42 
adobearm.exe
Details File 3 
c:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe
Details File 8 
c:\program files\amd\cim\bin64\installmanagerapp.exe
Details File 5 
c:\program files\avast software\avast\avemupdate.exe
Details File 3 
c:\program files\avast software\cleanup\avbugreport.exe
Details File 3 
c:\program files\common files\avast software\icarus\avast-tu\icarus.exe
Details File 6 
c:\program files\common files\avast software\overseer\overseer.exe
Details File 3 
avastbrowserupdate.exe
Details File 1 
c:\windows\system32\spool\drivers\x64 \3\e_ytsvce.exe
Details File 1 
c:\windows\system32\spool\drivers\x64 \3\e_ytsrde.exe
Details File 105 
googleupdate.exe
Details File 1 
d:\program files\bin\win64\matlabstartupaccelerator.exe
Details File 29 
c:\program files\common files\microsoft shared\clicktorun\officec2rclient.exe
Details File 10 
sdxhelper.exe
Details File 38 
c:\program files\mozilla firefox\default-browser-agent.exe
Details File 8 
c:\program files\npcap\checkstatus.bat
Details File 20 
c:\programdata\nvidia\nvcontainerdriverupdatecheck.log
Details File 19 
c:\program files\nvidia corporation\nvidia geforce experience\nvidia geforce experience.exe
Details File 19 
c:\program files\nvidia corporation\update core\nvprofileupdater64.exe
Details File 1 
c:\users\nicolas\appdata\local\programs\opera gx\launcher.exe
Details File 10 
overwolfupdater.exe
Details File 8 
c:\program files\amd\cnext\cnext\cncmd.exe
Details File 1 
c:\windows\system32\spool\drivers\x64\3\e_ytsvce.exe
Details File 1 
c:\windows\system32\spool\drivers\x64\3\e_ytsrde.exe
Details File 1 
d:\programs\bin\win64\matlabstartupaccelerator.exe
Details File 85 
www.bin
Details File 19 
c:\program files\adobe\acrobat dc\acrobat\air\nppdf32.dll
Details File 13 
npadobeaamdetect64.dll
Details File 16 
npspwrap.dll
Details File 3 
npwlpg.dll
Details File 1 
npavastbrowserupdate3.dll
Details File 10 
npvlc.dll
Details File 10 
npadobeaamdetect32.dll
Details File 5 
newtab.html
Details File 14 
agmservice.exe
Details File 15 
agsservice.exe
Details File 4 
c:\program files\amd\performance profile client\aueplauncher.exe
Details File 14 
elevation_service.exe
Details File 11 
beservice.exe
Details File 4 
c:\program files\corsair\corsair icue 4 software\cuellaccessservice.exe
Details File 1 
c:\program files\corsair\corsair icue 4 software\corsairmsipluginservice.exe
Details File 86 
service.exe
Details File 18 
easyanticheat.exe
Details File 16 
epiconlineserviceshost.exe
Details File 7 
c:\windows\system32\escsvc64.exe
Details File 1 
d:\programs\gog galaxy\galaxyclientservice.exe
Details File 5 
galaxycommunication.exe
Details File 8 
originclientservice.exe
Details File 8 
originwebhelperservice.exe
Details File 3 
c:\program files\parsec\pservice.exe
Details File 1 
d:\program files\launcher\rockstarservice.exe
Details File 6 
c:\program files\oracle\virtualbox\vboxsds.exe
Details File 5 
c:\program files\riot vanguard\vgc.exe
Details File 87 
nissrv.exe
Details File 198 
msmpeng.exe
Details File 4 
wsappservice.exe
Details File 4 
driverinstall.exe
Details File 30 
containerlocalsystem.log
Details File 1 
c:\ windows\system32\driverstore\filerepository\nv_dispi.inf
Details File 1 
c:\windows\system32\ampa.sys
Details File 15 
c:\windows\system32\drivers\applekmdffilter.sys
Details File 21 
c:\windows\system32\drivers\applelowerfilter.sys
Details File 4 
c:\windows\system32\drivers\aswarpot.sys
Details File 5 
c:\windows\system32\drivers\aswbidsdriver.sys
Details File 4 
c:\windows\system32\drivers\aswbidsh.sys
Details File 4 
c:\windows\system32\drivers\aswbuniv.sys
Details File 4 
c:\windows\system32\drivers\aswelam.sys
Details File 4 
c:\windows\system32\drivers\aswkbd.sys
Details File 4 
c:\windows\system32\drivers\aswmonflt.sys
Details File 4 
c:\windows\system32\drivers\aswnethub.sys
Details File 4 
c:\windows\system32\drivers\aswrdr2.sys
Details File 4 
c:\windows\system32\drivers\aswrvrt.sys
Details File 4 
c:\windows\system32\drivers\aswsnx.sys
Details File 4 
c:\windows\system32\drivers\aswsp.sys
Details File 4 
c:\windows\system32\drivers\aswstm.sys
Details File 4 
c:\windows\system32\drivers\aswvmm.sys
Details File 5 
c:\windows\system32\drivers\corsairgamingaudio64.sys
Details File 4 
c:\program files\corsair\corsair icue 4 software\corsairllaccess64.sys
Details File 6 
c:\windows\system32\drivers\corsairvbusdriver.sys
Details File 6 
c:\windows\system32\drivers\corsairvhiddriver.sys
Details File 1 
c:\windows\system32\ddmdrv.sys
Details File 1 
c:\windows\system32\drivers\ivcamaud.sys
Details File 3 
c:\windows\system32\epmntdrv.sys
Details File 3 
c:\windows\system32\drivers\epmvolfl.sys
Details File 3 
c:\windows\system32\drivers\eudcpepm.sys
Details File 3 
c:\windows\system32\drivers\euedkepm.sys
Details File 4 
c:\windows\system32\drivers\googledrivefs31092.sys
Details File 1 
c:\windows\system32\drivers\ivcam.sys
Details File 30 
c:\windows\system32\drivers\mbamchameleon.sys
Details File 38 
c:\windows\system32\drivers\mbamelam.sys
Details File 38 
c:\windows\system32\drivers\mbamswissarmy.sys
Details File 4 
c:\windows\system32\drivers\netaapl64.sys
Details File 8 
c:\windows\system32\drivers\npcap.sys
Details File 14 
c:\windows\system32\driverstore\filerepository\nvmoduletracker.inf
Details File 14 
nvmoduletracker.sys
Details File 1 
c:\windows\system32\drivers\wudfrd.sys
Details File 3 
c:\windows\system32\drivers\steamstreamingmicrophone.sys
Details File 3 
c:\windows\system32\drivers\steamstreamingspeakers.sys
Details File 16 
c:\windows\system32\drivers\tap0901.sys
Details File 8 
c:\windows\system32\drivers\usbaapl64.sys
Details File 7 
c:\windows\system32\drivers\vbaudio_cable64_win7.sys
Details File 3 
c:\windows\system32\drivers\vbaudio_vmauxvaio64_win10.sys
Details File 5 
c:\windows\system32\drivers\vbaudio_vmvaio64_win10.sys
Details File 6 
c:\windows\system32\drivers\vboxnetadp6.sys
Details File 7 
c:\windows\system32\drivers\vboxnetlwf.sys
Details File 5 
c:\program files\riot vanguard\vgk.sys
Details File 5 
c:\windows\system32\drivers\vigembus.sys
Details File 3 
c:\windows\system32\drivers\vmnetbridge.sys
Details File 1 
c:\windows\system32\drivers\vmparport.sys
Details File 4 
c:\windows\system32\drivers\vsock.sys
Details File 70 
c:\windows\system32\drivers\wd\wdboot.sys
Details File 8 
c:\windows\system32\drivers\wdcsam64.sys
Details File 70 
c:\windows\system32\drivers\wd\wdfilter.sys
Details File 70 
c:\windows\system32\drivers\wd\wdnisdrv.sys
Details File 1 
c:\windows\system32\drivers\womic.sys
Details File 1 
c:\users\nicholas\downloads\frst.txt
Details File 1 
c:\windows\system32\tasks\postponedevicesetuptoast_s-1-5-21-3608819275-3278233739-27750186-1001_4 2023-08-07 01:36 - 2023-08-07 01:38 - 000025532 _____ c:\users\nicholas\downloads\fixlog.txt
Details File 1 
c:\users\nicholas\downloads\frst64english.exe
Details File 1 
c:\users\nicholas\desktop\gem vi.txt
Details File 1 
c:\users\nicolas\downloads\adwcleaner.exe
Details File 1 
c:\users\nicolas\downloads\sandworm.json
Details File 1 
c:\users\nicolas\downloads\demande_avenant.pdf
Details File 1 
c:\users\nicholas\downloads\nw raid - sandworm.xlsx
Details File 1 
c:\users\nicholas\desktop\snsrap.mp4
Details File 1 
c:\users\nicholas\desktop\moments-clip-from-jul-23-2023.mp4
Details File 1 
c:\users\nicholas\desktop\new world.url
Details File 1 
c:\users\nicholas\downloads\treesizefreesetup.exe
Details File 1 
20230401.exe
Details File 1 
c:\users\nicolas\downloads\dhl-paketmarke_nsvlvvzeewt90_jonatan_noeddebo_knudsen.pdf
Details File 1 
c:\users\nicholas\desktop\sandworm.json
Details File 3 
c:\windows\system32\aswboot.exe
Details File 31 
c:\windows\system32\perfstringbackup.ini
Details File 2 
c:\windows\system32\perfh00c.dat
Details File 2 
c:\windows\system32\perfc00c.dat
Details File 1 
c:\windows\inf 2023-08-07 01:44 - 2021-12-16 03:20 - 000000000 ____d c:\windows\systemtemp 2023-08-07 01:44 - 2020-04-11 23:14 - 000000001 _____ c:\windows\vgkbootstatus.dat
Details File 1 
c:\users\nicholas\appdata\local\malwarebytes 2023-08-07 01:43 - 2023-02-19 21:42 - 000000000 ____d c:\users\nicholas\appdata\local\discord 2023-08-07 01:43 - 2021-08-27 12:57 - 000000000 ____d c:\users\nicholas\appdata\roaming\microsoft\teams 2023-08-07 01:43 - 2017-04-28 22:31 - 000000000 ___dc c:\users\nicholas\appdata\roaming\discord 2023-08-07 01:42 - 2021-03-27 07:16 - 000000006 ____h c:\windows\tasks\sa.dat
Details File 1 
c:\programdata\avast software 2023-08-07 01:41 - 2019-12-07 11:03 - 000786432 _____ c:\windows\system32\config\bbi 2023-08-07 01:31 - 2022-02-23 19:59 - 000034947 _____ c:\users\nicholas\appdata\roaming\voicemeeterbananadefault.xml
Details File 1 
bdinstall.bin
Details File 2 
c:\windows\system32\9earssurroundsound.dll
Details File 1 
c:\programdata\displaysessioncontainer5.log
Details File 1 
c:\programdata\displaysessioncontainer2.log
Details File 1 
c:\programdata\displaysessioncontainer1.log
Details File 1 
c:\programdata\displaysessioncontainer4.log
Details File 1 
c:\programdata\displaysessioncontainer3.log
Details File 24 
c:\windows\system32\fntcache.dat
Details File 54 
c:\windows\syswow64\printconfig.dll
Details File 59 
c:\windows\system32\mrt.exe
Details File 1 
c:\windows\system32\drivers\aswmyflt.sys
Details File 1 
c:\users\nicholas\desktop\kprm-20230703152305.txt
Details File 1 
c:\users\nicholas\appdata\roaming\adobewlcmcache.dat
Details File 1 
c:\users\nicholas\appdata\roaming\camdata.ini
Details File 1 
c:\users\nicolas\appdata\roaming\camlayout.ini
Details File 1 
c:\users\nicolas\appdata\roaming\camshapes.ini
Details File 1 
c:\users\nicolas\appdata\roaming\camstudio.cfg
Details File 1 
c:\users\nicolas\appdata\roaming\voicemeeterbananadefault.xml
Details File 1 
c:\users\nicolas\appdata\local\oobelibmkey.log
Details File 86 
frst.txt
Details File 70 
onedrivesetup.exe
Details File 34 
win.rar
Details File 2 
c:\program files\windowsapps\pythonsoftwarefoundation.py
Details File 13 
addinloader.dll
Details File 1 
c:\users\nicolas\appdata\local\microsoft \ teams\current\teams.exe
Details File 6 
drivefsext.dll
Details File 9 
coresync_x64.dll
Details File 3 
c:\program files\google\drive\googledrivesync64.dll
Details File 4 
c:\program files\avast software\avast\ashshell.dll
Details File 1 
d:\programs\notepad++\nppshell_06.dll
Details File 3 
c:\program files\google\drive\contextmenu64.dll
Details File 5 
c:\program files\common files\apple\internet services\shellstreams64.dll
Details File 3 
rarext64.dll
Details File 3 
rarext.dll
Details File 2 
vmdkshellext.dll
Details File 2 
vmdkshellext64.dll
Details File 35 
c:\program files\malwarebytes\anti-malware\mbshlext.dll
Details File 5 
c:\program files\amd\cnext\cnext\atiacm64.dll
Details File 29 
nvshext.dll
Details File 409 
c:\windows\system32\cmd.exe
Details File 1 
c:\users\nicolas\anaconda3\scripts\activate.bat
Details File 271 
chrome.exe
Details File 5 
lame_enc.dll
Details File 1 
c:\program files\elgato\streamdeck\giflib5.dll
Details File 1 
c:\program files\elgato\streamdeck\qtzeroconf.dll
Details File 1 
c:\program files\elgato\streamdeck\turbojpeg.dll
Details File 2 
fsclog.dll
Details File 1 
epnsm.dll
Details File 1 
lcmgr.dll
Details File 1 
c:\program files\elgato\streamdeck\sqlite3.dll
Details File 1 
c:\program files\logitech gaming software \libeay32.dll
Details File 1 
c:\program files\logitech gaming software \ssleay32.dll
Details File 7 
libcrypto-1_1-x64.dll
Details File 1 
c:\program files\elgato\streamdeck \libcrypto-1_1-x64.dll
Details File 1 
c:\program files\elgato\streamdeck \libssl-1_1-x64.dll
Details File 10 
aswsp.sys
Details File 10 
ochelper.dll
Details File 9 
msosb.dll
Details File 1 
c:\users\nicolas\appdata\local\packages\pythonsoftwarefoundation.py
Details File 1 
c:\users\nicolas\downloads\wallpaper by thafnine - adjusted for dual monitors - imgur.jpg
Details File 12 
compact.exe
Details File 1 
c:\users\nicolas\appdata\roaming\microsoft\windows\start menu\setup2.exe
Details File 97 
mpcmdrun.exe
Details File 6 
aswamsi.dll
Details File 7 
sihclient.exe
Details File 91 
addition.txt
Details sha1 2 
907d65e9b562315997dd5ad086b2b7598957b92c
Details IPv4 1 
78.0.1.0
Details IPv4 4 
192.168.178.1
Details IPv4 1 
212.27.40.240
Details IPv4 1 
212.27.40.241
Details IPv4 295 
8.8.8.8
Details IPv4 63 
8.8.4.4
Details IPv4 2 
172.20.10.1
Details IPv4 4 
192.168.100.254
Details IPv4 2 
2.4.3.237
Details IPv4 1 
1.5.3.10
Details IPv4 1 
9.15.7.0
Details IPv4 7 
2.2.0.130
Details IPv4 3 
1.0.0.83
Details IPv4 3 
5.17.0.0
Details IPv4 2 
7.0.4.4
Details IPv4 7 
5.12.0.38
Details IPv4 2 
16.5.0.12
Details IPv4 5 
2.7.0.3
Details IPv4 14 
3.1.0.1
Details IPv4 1 
9.9.4.37
Details IPv4 1 
1.1.125.0
Details IPv4 4 
2.0.33.0
Details IPv4 4 
3.1.4.0
Details IPv4 1 
2.7.3.0
Details IPv4 1 
7.8.0.7
Details IPv4 1 
12.12.8.2
Details IPv4 109 
1.0.0.0
Details IPv4 12 
3.72.0.0
Details IPv4 9 
3.27.0.112
Details IPv4 7 
1.3.40.14
Details IPv4 1 
0.228.0.21
Details IPv4 28 
4.0.0.0
Details IPv4 8 
2.0.1.0
Details IPv4 3 
2.0.7.5
Details IPv4 2 
2.1.0.5
Details IPv4 1 
1.12.7.0
Details IPv4 34 
2.10.91.91
Details IPv4 3 
5.0.3.0
Details IPv4 1 
3.1.2.0
Details IPv4 1 
1.0.11.0
Details IPv4 1 
1.0.13.0
Details IPv4 6 
8.92.0.0
Details IPv4 4 
1.19.0.0
Details IPv4 1 
10.0.8.0
Details IPv4 1 
16.0.95.0
Details IPv4 19 
10.1.0.0
Details IPv4 2 
5.10.102.1
Details IPv4 2 
2.0.0.20
Details IPv4 1441 
127.0.0.1
Details IPv4 1 
172.30.208.1
Details Microsoft Patch Numbers 1 
KB2504637
Details Microsoft Patch Numbers 21 
KB5001716
Details Microsoft Patch Numbers 11 
KB4023057
Details Url 1 
https://www.bing.com/search?form=incoh1&pc=ic04&ptag=ico
Details Url 5 
https://calendar.google.com
Details Url 1 
https://csgo500.com
Details Url 14 
https://drive.google.com
Details Url 1 
https://forum.conseil-config.com
Details Url 9 
https://mail.google.com
Details Url 1 
https://menfield.shop
Details Url 3 
https://www.netflix.com
Details Url 22 
https://www.wireshark.org
Details Url 22 
http://www.openssl.org
Details Url 12 
https://www.openssl.org
Details Url 1 
https://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=
Details Url 1 
https://axteragv-files.sharepoint.com
Details Url 2 
https://go.microsoft.com/fwlink/?linkid=37020&name
Details Windows Registry Key 68 
HKLM\...\Run
Details Windows Registry Key 50 
HKLM-x32\...\Run
Details Windows Registry Key 164 
HKLM\SOFTWARE\Microsoft\Windows
Details Windows Registry Key 19 
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Details Windows Registry Key 11 
HKU\S-1-5-19\...\Run
Details Windows Registry Key 11 
HKU\S-1-5-20\...\Run
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Run
Details Windows Registry Key 9 
HKU\S-1-5-18\...\Run
Details Windows Registry Key 12 
HKLM\...\Print\Monitors\EPSON
Details Windows Registry Key 7 
HKLM\...\Print\Monitors\EpsonNet
Details Windows Registry Key 59 
HKLM\Software\Microsoft\Active
Details Windows Registry Key 3 
HKLM\Software\Wow6432Node\Microsoft\Active
Details Windows Registry Key 15 
HKLM\SOFTWARE\Policies\Mozilla\Firefox
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension
Details Windows Registry Key 39 
HKLM-x32\...\Chrome\Extension
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001
Details Windows Registry Key 77 
HKLM-x32
Details Windows Registry Key 1 
HKLM-x32\...\AEFT_15_1_2
Details Windows Registry Key 1 
HKLM-x32\...\AUDT_11_1_1
Details Windows Registry Key 18 
HKLM-x32\...\Adobe
Details Windows Registry Key 1 
HKLM-x32\...\DRWV_18_2
Details Windows Registry Key 1 
HKLM-x32\...\ILST_22_1
Details Windows Registry Key 1 
HKLM-x32\...\IDSN_13_1
Details Windows Registry Key 1 
HKLM-x32\...\AME_12_1_2
Details Windows Registry Key 1 
HKLM-x32\...\PHSP_19_1_6
Details Windows Registry Key 1 
HKLM-x32\...\PPRO_12_1_2
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Overwolf_bemfloapmmjpmdmjfjgegnacdlgeapmkcmcmceei
Details Windows Registry Key 7 
HKLM-x32\...\AMD_Chipset_IODrivers
Details Windows Registry Key 10 
HKLM\...\AMD
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Anaconda3
Details Windows Registry Key 1 
HKLM\...\410fcd79-1be8-5bf1-986e-ea09c55f7edf
Details Windows Registry Key 1 
HKLM-x32\...\Arduino
Details Windows Registry Key 5 
HKLM-x32\...\Audacity_is1
Details Windows Registry Key 5 
HKLM\...\AutoHotkey
Details Windows Registry Key 5 
HKLM\...\Avast
Details Windows Registry Key 2 
HKLM-x32\...\Avast
Details Windows Registry Key 1 
HKLM-x32\...\AVI
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b
Details Windows Registry Key 15 
HKLM-x32\...\Battle.net
Details Windows Registry Key 1 
HKLM-x32\...\Bulk
Details Windows Registry Key 1 
HKLM-x32\...\Celtx
Details Windows Registry Key 3 
HKLM-x32\...\Diablo
Details Windows Registry Key 1 
HKLM-x32\...\Digilent
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Discord
Details Windows Registry Key 7 
HKLM-x32\...\EPSON
Details Windows Registry Key 4 
HKLM-x32\...\Epson
Details Windows Registry Key 12 
HKLM\...\EPSON
Details Windows Registry Key 5 
HKLM\...\Git_is1
Details Windows Registry Key 1 
HKLM-x32\...\Make-3.81_is1
Details Windows Registry Key 1 
HKLM-x32\...\Make-src-3.81_is1
Details Windows Registry Key 55 
HKLM-x32\...\Google
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Overwolf_eldaohcjmecjpkpdhhoiolhhaeapcldppbdgbnbc
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\HearthstoneDeckTracker
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Overwolf_dikgmjhafcjcgdpoakplhfjcjhfpdfkjgihpcjfh
Details Windows Registry Key 2 
HKLM-x32\...\IntelliJ
Details Windows Registry Key 1 
HKLM\...\iVCam_is1
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Riot
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\fcf71806-bbf8-5201-910f-7499961bc8e8
Details Windows Registry Key 1 
HKLM-x32\...\ManiaPlanet_is1
Details Windows Registry Key 1 
HKLM\...\Matlab
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\c1b3adcf-2068-5e8d-b25d-30ce588e3a4c
Details Windows Registry Key 68 
HKLM-x32\...\Microsoft
Details Windows Registry Key 3 
HKLM\...\HomeStudentRetail
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\OneDriveSetup.exe
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Teams
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\MiKTeX
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Movavi
Details Windows Registry Key 41 
HKLM\...\Mozilla
Details Windows Registry Key 41 
HKLM\...\MozillaMaintenanceService
Details Windows Registry Key 6 
HKLM-x32\...\Notepad
Details Windows Registry Key 4 
HKLM-x32\...\NpcapInst
Details Windows Registry Key 17 
HKLM-x32\...\OBS
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Overwolf_bhefjlijbpddfjbpokonlhdneiljfghigipgaijd
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Opera
Details Windows Registry Key 10 
HKLM-x32\...\Origin
Details Windows Registry Key 9 
HKLM-x32\...\Overwolf
Details Windows Registry Key 2 
HKLM-x32\...\Parsec
Details Windows Registry Key 1 
HKLM-x32\...\PhoneRescue
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\PhotoFilter
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Plays
Details Windows Registry Key 1 
HKLM\...\PUSH
Details Windows Registry Key 1 
HKLM-x32\...\Recovery
Details Windows Registry Key 5 
HKLM\...\Riot
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Overwolf_nonfnefnlcikmjkkdclbhpojenalpkcoipjjognm
Details Windows Registry Key 6 
HKLM-x32\...\Rockstar
Details Windows Registry Key 1 
HKLM\...\scilab-6.0.0
Details Windows Registry Key 1 
HKLM-x32\...\1434021265_is1
Details Windows Registry Key 4 
HKLM-x32\...\Skype_is1
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\Spotify
Details Windows Registry Key 34 
HKLM-x32\...\Steam
Details Windows Registry Key 6 
HKLM\...\029c4619-0385-5543-9426-46f9987161d9
Details Windows Registry Key 1 
HKLM\...\TeamSpeak
Details Windows Registry Key 1 
HKLM\...\Tesseract-OCR
Details Windows Registry Key 7 
HKLM-x32\...\Uplay
Details Windows Registry Key 2 
HKLM\...\TreeSize
Details Windows Registry Key 5 
HKLM\...\VB
Details Windows Registry Key 1 
HKLM-x32\...\0acab24f
Details Windows Registry Key 14 
HKLM-x32\...\VLC
Details Windows Registry Key 2 
HKLM-x32\...\VB
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\WinDirStat
Details Windows Registry Key 3 
HKLM-x32\...\WinLiveSuite
Details Windows Registry Key 3 
HKLM-x32\...\WinRAR
Details Windows Registry Key 3 
HKLM-x32\...\Wireshark
Details Windows Registry Key 1 
HKLM-x32\...\WOMic
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\ZoomUMX
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001_Classes\CLSID
Details Windows Registry Key 4 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys
Details Windows Registry Key 32 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService
Details Windows Registry Key 4 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys
Details Windows Registry Key 32 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\Software\Microsoft\Internet
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\sharepoint.com
Details Windows Registry Key 41 
HKLM\System\CurrentControlSet\Control\Session
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\Control
Details Windows Registry Key 98 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Details Windows Registry Key 42 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
Details Windows Registry Key 15 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost
Details Windows Registry Key 29 
HKLM\...\StartupApproved\Run
Details Windows Registry Key 30 
HKLM\...\StartupApproved\Run32
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\StartupApproved\StartupFolder
Details Windows Registry Key 1 
HKU\S-1-5-21-3608819275-3278233739-27750186-1001\...\StartupApproved\Run