What is crypt_2_3119.exe?

crypt_2_3119.exe is usually located in the 'c:\downloads\' folder.

None of the anti-virus scanners at VirusTotal reports anything malicious about crypt_2_3119.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

crypt_2_3119.exe does not have any version or vendor information.

Digital signatures [?]

crypt_2_3119.exe is not signed.

VirusTotal report

None of the 56 anti-virus programs at VirusTotal detected the crypt_2_3119.exe file.

Sandbox Report

The following information was gathered by executing the file inside Cuckoo Sandbox.

Summary

Successfully executed process in sandbox.

Summary

{
    "downloads_file": [
        "http:\/\/www.bing.com\/favicon.ico"
    ],
    "file_created": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF207CC4AAE4AB494B.TMP",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF7D4099A60B7852D1.TMP",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF655F6C46C282852D.TMP",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DFAC088FE259298364.TMP",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{4958307F-64F7-11EA-8829-08002749D99B}.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DFF87886A4501D4600.TMP",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{4958307E-64F7-11EA-8829-08002749D99B}.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020031220200313\\",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DFDC9B763F9B922FE4.TMP",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF4FF524D5709BBC8B.TMP",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020031220200313\\index.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF1E6E91729FB841D8.TMP"
    ],
    "file_recreated": [
        "\\Device\\Afd\\AsyncConnectHlp",
        "\\??\\STORAGE#Volume#{3f5cc1b2-70f9-11e8-b07b-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}",
        "\\??\\MountPointManager",
        "\\Device\\KsecDD",
        "\\??\\C:",
        "\\??\\STORAGE#Volume#{3f5cc1b2-70f9-11e8-b07b-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}",
        "\\Device\\NetBT_Tcpip_{EF381EA0-4D07-418D-A490-68AF67CE948B}",
        "\\DEVICE\\NETBT_TCPIP_{EF381EA0-4D07-418D-A490-68AF67CE948B}",
        "\\??\\Nsi",
        "\\Device\\Afd\\Endpoint"
    ],
    "dll_loaded": [
        "C:\\Windows\\system32\\pnrpnsp.dll",
        "DNSAPI.dll",
        "SHELL32.dll",
        "UXTHEME.DLL",
        "C:\\Windows\\system32\\ole32.dll",
        "dwmapi.dll",
        "C:\\Windows\\system32\\MSCTF.dll",
        "PROPSYS.dll",
        "SspiCli.dll",
        "ole32.dll",
        "USER32.dll",
        "OLEAUT32.DLL",
        "msfeeds.dll",
        "C:\\Windows\\System32\\mswsock.dll",
        "Shell32.dll",
        "C:\\Windows\\System32\\wship6.dll",
        "dhcpcsvc6.DLL",
        "rpcrt4.dll",
        "C:\\Windows\\System32\\wshtcpip.dll",
        "urlmon.dll",
        "mshtml.dll",
        "apphelp.dll",
        "kernel32.dll",
        "CRYPTBASE.dll",
        "oleaut32.dll",
        "C:\\Windows\\system32\\napinsp.dll",
        "schannel",
        "WININET.dll",
        "API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
        "MLANG.dll",
        "C:\\Windows\\system32\\Oleacc.dll",
        "IMM32.dll",
        "C:\\Program Files\\Internet Explorer\\sqmapi.dll",
        "comdlg32.dll",
        "C:\\Windows\\System32\\fwpuclnt.dll",
        "rtutils.dll",
        "IPHLPAPI.DLL",
        "RASAPI32.dll",
        "profapi.dll",
        "dhcpcsvc.DLL",
        "USERENV.dll",
        "VERSION.dll",
        "RpcRtRemote.dll",
        "user32.dll",
        "MSIMG32.dll",
        "CRYPT32.dll",
        "C:\\Windows\\system32\\rsaenh.dll",
        "C:\\Program Files\\Internet Explorer\\ieproxy.dll",
        "NTDLL.DLL",
        "shlwapi.dll",
        "iphlpapi",
        "UxTheme.dll",
        "comctl32.dll",
        "CRYPTSP.dll",
        "propsys.dll",
        "API-MS-WIN-Service-winsvc-L1-1-0.dll",
        "msctf.dll",
        "C:\\Windows\\system32\\xmllite.dll",
        "OLEAUT32",
        "sensapi.dll",
        "IEShims.dll",
        "C:\\Windows\\system32\\NLAapi.dll",
        "C:\\Windows\\system32\\IEUI.dll",
        "SXS.DLL",
        "ADVAPI32.dll",
        "advapi32",
        "SETUPAPI.dll",
        "WS2_32.dll",
        "IEFRAME.dll",
        "wintrust.dll",
        "USER32.DLL",
        "ntmarta.dll",
        "C:\\Windows\\system32\\Msimtf.dll",
        "API-MS-WIN-Service-Management-L1-1-0.dll",
        "rasadhlp.dll",
        "dnsapi",
        "OLEACC.DLL",
        "RASMAN.DLL",
        "IEUI.dll",
        "API-MS-Win-Security-SDDL-L1-1-0.dll",
        "wininet.dll",
        "SHELL32.DLL",
        "OLEAUT32.dll",
        "DHCPCSVC.DLL",
        "RPCRT4.dll",
        "C:\\Windows\\System32\\winrnr.dll",
        "C:\\Windows\\system32\\oleaut32.dll",
        "ws2_32",
        "C:\\Windows\\system32\\mswsock.dll",
        "DWMAPI.DLL",
        "Normaliz.dll"
    ],
    "file_opened": [
        "C:\\Users\\cuck\\Favorites\\Links",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~",
        "C:\\",
        "C:\\Users\\cuck\\AppData\\Local\\Temp",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\cuck@bing[1].txt",
        "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN.url",
        "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN Entertainment.url",
        "C:\\Windows\\System32\\en-US\\MSCTF.dll.mui",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
        "C:\\Users\\cuck\\Favorites\\MSN Websites\\",
        "C:\\Users\\cuck\\Desktop\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\",
        "C:\\Windows\\System32\\shell32.dll",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft",
        "C:\\Users\\cuck\\Favorites\\Windows Live\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\",
        "C:\\Users\\cuck\\Favorites\\Links\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low",
        "C:\\Windows\\System32\\wininet.dll",
        "C:\\Windows\\System32\\oleaccrc.dll",
        "C:\\Users\\cuck\\Favorites\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico",
        "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\",
        "C:\\Windows\\System32\\url.dll",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\",
        "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSNBC News.url",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\",
        "C:\\Windows\\System32\\ieframe.dll",
        "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\Microsoft Store.url",
        "C:\\Windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\\comctl32.dll.mui",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\",
        "C:\\Windows\\System32\\en-US\\urlmon.dll.mui",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\bba29d17b073ee4e9bd59e0d2083e3f5d97b4ebd284902157f22864a8a385181.bin.html",
        "C:\\Windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3",
        "C:\\Users\\cuck\\Favorites\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\",
        "C:\\Windows\\System32\\en-US\\jscript.dll.mui",
        "C:\\Users\\cuck\\Favorites\\Links\\Suggested Sites.url",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020031220200313\\",
        "C:\\Users\\cuck\\AppData\\Roaming",
        "C:\\Users\\cuck\\Favorites\\Links for United States\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020031220200313\\index.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\Low",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low",
        "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url",
        "C:\\Windows\\System32\\en-US\\MLANG.dll.mui",
        "C:\\Windows\\System32\\stdole2.tlb",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\Low",
        "C:\\Windows\\Fonts\\staticcache.dat",
        "C:\\Windows\\System32\\rsaenh.dll",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\Low\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
        "C:\\Users\\cuck\\Favorites\\Windows Live\\Windows Live Spaces.url",
        "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN Autos.url",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat",
        "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN Sports.url",
        "C:\\Users\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\cuck@www.bing[1].txt",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\",
        "C:\\Users",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019040920190410\\index.dat",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low",
        "C:\\Users\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\",
        "C:\\Users\\cuck",
        "C:\\Users\\cuck\\Favorites\\Links\\Web Slice Gallery.url",
        "C:\\Users\\cuck\\Favorites\\Links\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019040920190410\\",
        "C:\\Users\\cuck\\AppData\\Local",
        "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat",
        "C:\\Users\\cuck\\Favorites\\Windows Live\\Get Windows Live.url",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\",
        "C:\\Users\\cuck\\AppData\\",
        "C:\\Windows\\System32\\ras\\",
        "C:\\Users\\cuck\\AppData",
        "C:\\Users\\cuck\\Favorites\\Windows Live\\Windows Live Mail.url",
        "C:\\Users\\cuck\\Desktop",
        "C:\\Users\\cuck\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\",
        "C:\\Windows\\WindowsShell.manifest",
        "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\IE Add-on site.url",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat",
        "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\Microsoft At Work.url",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache",
        "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\Microsoft At Home.url",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\",
        "C:\\Users\\cuck\\Favorites\\Links for United States\\USA.gov.url",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\",
        "C:\\Users\\cuck\\Favorites\\Links for United States\\GobiernoUSA.gov.url",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows",
        "C:\\Users\\cuck\\Favorites",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\",
        "C:\\Users\\cuck\\Favorites\\Windows Live\\Windows Live Gallery.url",
        "C:\\Users\\cuck\\AppData\\Local\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds Cache\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft",
        "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN Money.url"
    ],
    "command_line": [
        "\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" SCODEF:2816 CREDAT:14337"
    ],
    "file_written": [
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{4958307F-64F7-11EA-8829-08002749D99B}.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF4FF524D5709BBC8B.TMP",
        "C:\\Users\\cuck\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{4958307E-64F7-11EA-8829-08002749D99B}.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF655F6C46C282852D.TMP"
    ],
    "file_failed": [
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~",
        "\\Device\\NetBT_Tcpip6_{AEFD33F3-CC73-4821-AD44-6915063E7FB1}",
        "C:\\Users\\cuck\\AppData",
        "C:\\Users\\cuck\\Favorites",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE",
        "\\DEVICE\\NETBT_TCPIP_{46C6AD23-CFC8-4177-B38F-6C28F239EB0D}",
        "\\Device\\NetBT_Tcpip_{AEFD33F3-CC73-4821-AD44-6915063E7FB1}",
        "C:\\Users",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019040920190410\\",
        "\\Sessions\\1\\BaseNamedObjects\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized",
        "C:\\Users\\cuck\\AppData\\Roaming",
        "\\DEVICE\\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows",
        "\\Device\\NetBT_Tcpip6_{EF381EA0-4D07-418D-A490-68AF67CE948B}",
        "C:\\ProgramData\\Microsoft\\Network\\Connections\\Pbk\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low",
        "\\Device\\NetBT_Tcpip6_{46C6AD23-CFC8-4177-B38F-6C28F239EB0D}",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History",
        "C:\\Users\\cuck",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\Low",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low",
        "\\Sessions\\1\\BaseNamedObjects\\Isolation Signal Registry (4958307D-64F7-11EA-8829-08002749D99B, 0)",
        "C:\\Users\\cuck\\AppData\\Local\\Temp",
        "C:\\Users\\cuck\\AppData\\Local",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\Low",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds",
        "\\Device\\RasAcd",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low",
        "C:\\tj.js"
    ],
    "guid": [
        "{275c23e2-3747-11d0-9fea-00aa003f8646}",
        "{c43dc798-95d1-4bea-9030-bb99e2983a1a}",
        "{04c18ccf-1f57-4cbd-88cc-3900f5195ce3}",
        "{06eee834-461c-42c2-8dcf-1502b527b1f9}",
        "{00020420-0000-0000-c000-000000000046}",
        "{9ba05972-f6a8-11cf-a442-00a0c90a8f39}",
        "{dccfc164-2b38-11d2-b7ec-00c04f8f5d9a}",
        "{25336920-03f9-11cf-8fd0-00aa00686f13}",
        "{6f237df9-9ddb-47ad-b218-400d54c286ad}",
        "{dcb00c01-570f-4a9b-8d69-199fdba5723b}",
        "{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
        "{465a756d-45ad-4305-85fd-d3321650f3b7}",
        "{00000146-0000-0000-c000-000000000046}",
        "{6c736dc1-ab0d-11d0-a2ad-00a0c90f27e8}",
        "{4516cee1-97da-4030-a444-2d8e296b96b6}",
        "{d0074ffd-570f-4a9b-8d69-199fdba5723b}",
        "{f5078f32-c551-11d3-89b9-0000f81fe221}",
        "{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}",
        "{fbf23b40-e3f0-101b-8488-00aa003e56f8}",
        "{000214e6-0000-0000-c000-000000000046}",
        "{00000001-0000-0000-c000-000000000046}",
        "{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}",
        "{ff393560-c2a7-11cf-bff4-444553540000}",
        "{00000323-0000-0000-c000-000000000046}",
        "{0000010b-0000-0000-c000-000000000046}",
        "{56fdf344-fd6d-11d0-958a-006097c9a090}",
        "{b5f8350b-0548-48b1-a6ee-88bd00b4a5e7}",
        "{2933bf81-7b36-11d2-b20e-00c04f983e60}",
        "{e7e4bc40-e76a-11ce-a9bb-00aa004ae837}",
        "{85cb6900-4d95-11cf-960c-0080c7f4ee85}",
        "{d5f569d0-593b-101a-b569-08002b2dbf7a}",
        "{ab310581-ac80-11d1-8df3-00c04fb6ef69}",
        "{30766bd2-ea1c-4f28-bf27-0b44e2f68db7}",
        "{79eac9ef-baf9-11ce-8c82-00aa004ba90b}",
        "{dcb00000-570f-4a9b-8d69-199fdba5723b}",
        "{7d096c5f-ac08-4f1f-beb7-5c22c517ce39}",
        "{50d5107a-d278-4871-8989-f4ceaaf59cfc}",
        "{7b8a2d95-0ac9-11d1-896c-00c04fb6bfc4}",
        "{bb1a2ae1-a4f9-11cf-8f20-00805f2cd064}",
        "{00021500-0000-0000-c000-000000000046}",
        "{a47979d2-c419-11d9-a5b4-001185ad2b89}",
        "{00000109-0000-0000-c000-000000000046}",
        "{6e26e776-04f0-495d-80e4-3330352e3169}",
        "{6c736db1-bd94-11d0-8a23-00aa00b58e10}",
        "{3050f406-98b5-11cf-bb82-00aa00bdce0b}",
        "{08c0e040-62d1-11d1-9326-0060b067b86e}"
    ]
}

Dropped

[
    {
        "yara": [],
        "sha1": "3bcc94d09abd47cbfcb7cd6938bdcd00fc02c5f9",
        "name": "1de0f24420f94431_{4958307f-64f7-11ea-8829-08002749d99b}.dat",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{4958307F-64F7-11EA-8829-08002749D99B}.dat",
        "type": "Composite Document File V2 Document, Cannot read section info",
        "sha256": "1de0f24420f94431b9edba19a288b5e9c848ac1bf032dd1b437f6a11d325ed15",
        "urls": [],
        "crc32": "D56516D5",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/6053\/files\/1de0f24420f94431_{4958307f-64f7-11ea-8829-08002749d99b}.dat",
        "ssdeep": null,
        "size": 4608,
        "sha512": "be492a0929ad40d1d356f180a40b6380c9e12b70d1a0d7609699a90235b5ea224fddb9cafca31a0ff3d5372a1389e7309361f361469dfc9f0fb0e6d2fcbdb686",
        "pids": [
            2816
        ],
        "md5": "a16507bcf33e40293a819bc3713c7af8"
    },
    {
        "yara": [],
        "sha1": "87c460118467c0f242e39631a7d17667651e5de6",
        "name": "209103b0402e5bb3_recoverystore.{4958307e-64f7-11ea-8829-08002749d99b}.dat",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{4958307E-64F7-11EA-8829-08002749D99B}.dat",
        "type": "Composite Document File V2 Document, Cannot read section info",
        "sha256": "209103b0402e5bb30391cee6b93d9a3cd4abb7b0ebafcda2f372b8d80b22b445",
        "urls": [],
        "crc32": "8607EFB7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/6053\/files\/209103b0402e5bb3_recoverystore.{4958307e-64f7-11ea-8829-08002749d99b}.dat",
        "ssdeep": null,
        "size": 3584,
        "sha512": "5f28a1993d90bda2af60aa2d6aeac940c57c4b1e8a8609a91d8bb7905e5dd1cda889e0594dac33d4a82d507e2bfdc3ced139f92659f9febdbc8b60fbe43f1edd",
        "pids": [
            2816
        ],
        "md5": "b5a24c09196c28c15fd170e80fa0c76d"
    }
]

Generic

[
    {
        "process_path": "C:\\Program Files\\Internet Explorer\\iexplore.exe",
        "process_name": "iexplore.exe",
        "pid": 2816,
        "summary": {
            "downloads_file": [
                "http:\/\/www.bing.com\/favicon.ico"
            ],
            "file_created": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF207CC4AAE4AB494B.TMP",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF7D4099A60B7852D1.TMP",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF655F6C46C282852D.TMP",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DFAC088FE259298364.TMP",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{4958307F-64F7-11EA-8829-08002749D99B}.dat",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DFF87886A4501D4600.TMP",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{4958307E-64F7-11EA-8829-08002749D99B}.dat",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DFDC9B763F9B922FE4.TMP",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF4FF524D5709BBC8B.TMP",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF1E6E91729FB841D8.TMP"
            ],
            "file_recreated": [
                "\\??\\STORAGE#Volume#{3f5cc1b2-70f9-11e8-b07b-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}",
                "\\??\\MountPointManager",
                "\\Device\\KsecDD",
                "\\??\\C:",
                "\\??\\STORAGE#Volume#{3f5cc1b2-70f9-11e8-b07b-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}",
                "\\Device\\NetBT_Tcpip_{EF381EA0-4D07-418D-A490-68AF67CE948B}",
                "\\DEVICE\\NETBT_TCPIP_{EF381EA0-4D07-418D-A490-68AF67CE948B}",
                "\\??\\Nsi",
                "\\Device\\Afd\\Endpoint"
            ],
            "dll_loaded": [
                "IEFRAME.dll",
                "C:\\Windows\\System32\\fwpuclnt.dll",
                "sensapi.dll",
                "urlmon.dll",
                "propsys.dll",
                "C:\\Windows\\System32\\mswsock.dll",
                "msfeeds.dll",
                "dhcpcsvc.DLL",
                "rasadhlp.dll",
                "Shell32.dll",
                "kernel32.dll",
                "comdlg32.dll",
                "CRYPTBASE.dll",
                "C:\\Windows\\System32\\wshtcpip.dll",
                "C:\\Windows\\system32\\ole32.dll",
                "dwmapi.dll",
                "NTDLL.DLL",
                "shlwapi.dll",
                "C:\\Windows\\system32\\napinsp.dll",
                "iphlpapi",
                "UxTheme.dll",
                "ntmarta.dll",
                "API-MS-WIN-Service-Management-L1-1-0.dll",
                "C:\\Program Files\\Internet Explorer\\ieproxy.dll",
                "PROPSYS.dll",
                "WININET.dll",
                "C:\\Windows\\System32\\wship6.dll",
                "dnsapi",
                "API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
                "DHCPCSVC.DLL",
                "OLEAUT32.DLL",
                "SspiCli.dll",
                "ole32.dll",
                "CRYPT32.dll",
                "CRYPTSP.dll",
                "USER32.dll",
                "IMM32.dll",
                "C:\\Program Files\\Internet Explorer\\sqmapi.dll",
                "API-MS-Win-Security-SDDL-L1-1-0.dll",
                "C:\\Windows\\system32\\pnrpnsp.dll",
                "RASMAN.DLL",
                "msctf.dll",
                "rtutils.dll",
                "IPHLPAPI.DLL",
                "API-MS-WIN-Service-winsvc-L1-1-0.dll",
                "wininet.dll",
                "apphelp.dll",
                "SHELL32.DLL",
                "C:\\Windows\\system32\\xmllite.dll",
                "RASAPI32.dll",
                "OLEAUT32.dll",
                "profapi.dll",
                "SHELL32.dll",
                "RPCRT4.dll",
                "DNSAPI.dll",
                "C:\\Windows\\System32\\winrnr.dll",
                "IEUI.dll",
                "comctl32.dll",
                "C:\\Windows\\system32\\oleaut32.dll",
                "C:\\Windows\\system32\\NLAapi.dll",
                "C:\\Windows\\system32\\IEUI.dll",
                "VERSION.dll",
                "ws2_32",
                "MLANG.dll",
                "UXTHEME.DLL",
                "dhcpcsvc6.DLL",
                "C:\\Windows\\system32\\mswsock.dll",
                "SXS.DLL",
                "ADVAPI32.dll",
                "rpcrt4.dll",
                "advapi32",
                "SETUPAPI.dll",
                "WS2_32.dll",
                "C:\\Windows\\system32\\MSCTF.dll",
                "user32.dll",
                "MSIMG32.dll"
            ],
            "file_opened": [
                "C:\\Users\\cuck\\Favorites\\Links",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~",
                "C:\\",
                "C:\\Users\\cuck\\AppData\\Local\\Temp",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\",
                "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN.url",
                "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN Entertainment.url",
                "C:\\Windows\\System32\\en-US\\MSCTF.dll.mui",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
                "C:\\Users\\cuck\\Favorites\\MSN Websites\\",
                "C:\\Users\\cuck\\Desktop\\desktop.ini",
                "C:\\Windows\\System32\\shell32.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft",
                "C:\\Users\\cuck\\Favorites\\Windows Live\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\",
                "C:\\Users\\cuck\\Favorites\\Links\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low",
                "C:\\Windows\\System32\\wininet.dll",
                "C:\\Windows\\System32\\oleaccrc.dll",
                "C:\\Users\\cuck\\Favorites\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico",
                "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\",
                "C:\\Windows\\System32\\url.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\",
                "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSNBC News.url",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat",
                "C:\\Windows\\System32\\ieframe.dll",
                "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\Microsoft Store.url",
                "C:\\Windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\\comctl32.dll.mui",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\",
                "C:\\Windows\\System32\\en-US\\urlmon.dll.mui",
                "C:\\Windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3",
                "C:\\Users\\cuck\\Favorites\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE",
                "C:\\Users\\cuck\\Favorites\\Links\\Suggested Sites.url",
                "C:\\Users\\cuck\\AppData\\Roaming",
                "C:\\Users\\cuck\\Favorites\\Links for United States\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\Low",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low",
                "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\",
                "C:\\Windows\\System32\\stdole2.tlb",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\Low",
                "C:\\Windows\\Fonts\\staticcache.dat",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\Low\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
                "C:\\Users\\cuck\\Favorites\\Windows Live\\Windows Live Spaces.url",
                "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN Autos.url",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat",
                "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN Sports.url",
                "C:\\Users\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\cuck@www.bing[1].txt",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\",
                "C:\\Users",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\",
                "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\Microsoft At Work.url",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low",
                "C:\\Users\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\",
                "C:\\Users\\cuck",
                "C:\\Users\\cuck\\Favorites\\Links\\Web Slice Gallery.url",
                "C:\\Users\\cuck\\Favorites\\Links\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\cuck@bing[1].txt",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\",
                "C:\\Users\\cuck\\Favorites",
                "C:\\Users\\cuck\\AppData\\Local",
                "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat",
                "C:\\Users\\cuck\\Favorites\\Windows Live\\Get Windows Live.url",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\",
                "C:\\Users\\cuck\\AppData\\",
                "C:\\Windows\\System32\\ras\\",
                "C:\\Users\\cuck\\AppData",
                "C:\\Users\\cuck\\Favorites\\Windows Live\\Windows Live Mail.url",
                "C:\\Users\\cuck\\Desktop",
                "C:\\Users\\cuck\\",
                "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\IE Add-on site.url",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache",
                "C:\\Users\\cuck\\Favorites\\Microsoft Websites\\Microsoft At Home.url",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\",
                "C:\\Users\\cuck\\Favorites\\Links for United States\\USA.gov.url",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\",
                "C:\\Users\\cuck\\Favorites\\Links for United States\\GobiernoUSA.gov.url",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\",
                "C:\\Users\\cuck\\Favorites\\Windows Live\\Windows Live Gallery.url",
                "C:\\Users\\cuck\\AppData\\Local\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds Cache\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft",
                "C:\\Users\\cuck\\Favorites\\MSN Websites\\MSN Money.url"
            ],
            "command_line": [
                "\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" SCODEF:2816 CREDAT:14337"
            ],
            "file_written": [
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{4958307F-64F7-11EA-8829-08002749D99B}.dat",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF4FF524D5709BBC8B.TMP",
                "C:\\Users\\cuck\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{4958307E-64F7-11EA-8829-08002749D99B}.dat",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF655F6C46C282852D.TMP"
            ],
            "file_failed": [
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~",
                "\\Device\\NetBT_Tcpip6_{AEFD33F3-CC73-4821-AD44-6915063E7FB1}",
                "C:\\Users\\cuck\\AppData",
                "C:\\Users\\cuck\\Favorites",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE",
                "\\DEVICE\\NETBT_TCPIP_{46C6AD23-CFC8-4177-B38F-6C28F239EB0D}",
                "\\Device\\NetBT_Tcpip_{AEFD33F3-CC73-4821-AD44-6915063E7FB1}",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019040920190410\\",
                "\\Sessions\\1\\BaseNamedObjects\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized",
                "C:\\Users\\cuck\\AppData\\Roaming",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows",
                "\\Device\\NetBT_Tcpip6_{EF381EA0-4D07-418D-A490-68AF67CE948B}",
                "C:\\ProgramData\\Microsoft\\Network\\Connections\\Pbk\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies",
                "\\Device\\NetBT_Tcpip6_{46C6AD23-CFC8-4177-B38F-6C28F239EB0D}",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low",
                "\\DEVICE\\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}",
                "C:\\Users",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
                "C:\\Users\\cuck",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\Low",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low",
                "\\Sessions\\1\\BaseNamedObjects\\Isolation Signal Registry (4958307D-64F7-11EA-8829-08002749D99B, 0)",
                "C:\\Users\\cuck\\AppData\\Local\\Temp",
                "C:\\Users\\cuck\\AppData\\Local",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\Low",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds",
                "\\Device\\RasAcd",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files"
            ],
            "guid": [
                "{6f237df9-9ddb-47ad-b218-400d54c286ad}",
                "{c43dc798-95d1-4bea-9030-bb99e2983a1a}",
                "{04c18ccf-1f57-4cbd-88cc-3900f5195ce3}",
                "{06eee834-461c-42c2-8dcf-1502b527b1f9}",
                "{00020420-0000-0000-c000-000000000046}",
                "{6e26e776-04f0-495d-80e4-3330352e3169}",
                "{dcb00c01-570f-4a9b-8d69-199fdba5723b}",
                "{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
                "{465a756d-45ad-4305-85fd-d3321650f3b7}",
                "{00000146-0000-0000-c000-000000000046}",
                "{4516cee1-97da-4030-a444-2d8e296b96b6}",
                "{d0074ffd-570f-4a9b-8d69-199fdba5723b}",
                "{f5078f32-c551-11d3-89b9-0000f81fe221}",
                "{d5f569d0-593b-101a-b569-08002b2dbf7a}",
                "{fbf23b40-e3f0-101b-8488-00aa003e56f8}",
                "{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}",
                "{00000323-0000-0000-c000-000000000046}",
                "{0000010b-0000-0000-c000-000000000046}",
                "{56fdf344-fd6d-11d0-958a-006097c9a090}",
                "{b5f8350b-0548-48b1-a6ee-88bd00b4a5e7}",
                "{2933bf81-7b36-11d2-b20e-00c04f983e60}",
                "{00021500-0000-0000-c000-000000000046}",
                "{ab310581-ac80-11d1-8df3-00c04fb6ef69}",
                "{30766bd2-ea1c-4f28-bf27-0b44e2f68db7}",
                "{dcb00000-570f-4a9b-8d69-199fdba5723b}",
                "{7d096c5f-ac08-4f1f-beb7-5c22c517ce39}",
                "{a47979d2-c419-11d9-a5b4-001185ad2b89}",
                "{00000109-0000-0000-c000-000000000046}"
            ]
        },
        "first_seen": 1584085984.609375,
        "ppid": 2016
    },
    {
        "process_path": "C:\\Windows\\System32\\lsass.exe",
        "process_name": "lsass.exe",
        "pid": 476,
        "summary": {},
        "first_seen": 1584085984.328125,
        "ppid": 376
    },
    {
        "process_path": "C:\\Program Files\\Internet Explorer\\iexplore.exe",
        "process_name": "iexplore.exe",
        "pid": 2468,
        "summary": {
            "file_created": [
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020031220200313\\index.dat",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020031220200313\\"
            ],
            "file_recreated": [
                "\\Device\\Afd\\AsyncConnectHlp",
                "\\??\\STORAGE#Volume#{3f5cc1b2-70f9-11e8-b07b-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}",
                "\\??\\MountPointManager",
                "\\??\\C:",
                "\\??\\STORAGE#Volume#{3f5cc1b2-70f9-11e8-b07b-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}",
                "\\Device\\NetBT_Tcpip_{EF381EA0-4D07-418D-A490-68AF67CE948B}",
                "\\DEVICE\\NETBT_TCPIP_{EF381EA0-4D07-418D-A490-68AF67CE948B}",
                "\\??\\Nsi",
                "\\Device\\Afd\\Endpoint"
            ],
            "dll_loaded": [
                "IEFRAME.dll",
                "dhcpcsvc.DLL",
                "C:\\Windows\\System32\\fwpuclnt.dll",
                "sensapi.dll",
                "urlmon.dll",
                "OLEACC.DLL",
                "mshtml.dll",
                "C:\\Windows\\System32\\mswsock.dll",
                "apphelp.dll",
                "CRYPT32.dll",
                "rasadhlp.dll",
                "Shell32.dll",
                "kernel32.dll",
                "API-MS-Win-Security-SDDL-L1-1-0.dll",
                "CRYPTBASE.dll",
                "C:\\Windows\\system32\\rsaenh.dll",
                "C:\\Windows\\system32\\ole32.dll",
                "IEShims.dll",
                "dwmapi.dll",
                "shlwapi.dll",
                "C:\\Windows\\system32\\napinsp.dll",
                "USER32.DLL",
                "iphlpapi",
                "ntmarta.dll",
                "schannel",
                "API-MS-WIN-Service-Management-L1-1-0.dll",
                "C:\\Program Files\\Internet Explorer\\ieproxy.dll",
                "PROPSYS.dll",
                "WININET.dll",
                "C:\\Windows\\System32\\wship6.dll",
                "dnsapi",
                "API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
                "DHCPCSVC.DLL",
                "OLEAUT32.DLL",
                "SspiCli.dll",
                "C:\\Windows\\system32\\Oleacc.dll",
                "ole32.dll",
                "USERENV.dll",
                "CRYPTSP.dll",
                "USER32.dll",
                "IMM32.dll",
                "C:\\Program Files\\Internet Explorer\\sqmapi.dll",
                "comdlg32.dll",
                "C:\\Windows\\system32\\pnrpnsp.dll",
                "MLANG.dll",
                "wintrust.dll",
                "rtutils.dll",
                "IPHLPAPI.DLL",
                "API-MS-WIN-Service-winsvc-L1-1-0.dll",
                "wininet.dll",
                "DWMAPI.DLL",
                "RASAPI32.dll",
                "OLEAUT32.dll",
                "profapi.dll",
                "SHELL32.dll",
                "RPCRT4.dll",
                "DNSAPI.dll",
                "C:\\Windows\\System32\\winrnr.dll",
                "C:\\Windows\\System32\\wshtcpip.dll",
                "comctl32.dll",
                "C:\\Windows\\system32\\oleaut32.dll",
                "OLEAUT32",
                "C:\\Windows\\system32\\NLAapi.dll",
                "RASMAN.DLL",
                "SXS.DLL",
                "RpcRtRemote.dll",
                "ws2_32",
                "dhcpcsvc6.DLL",
                "C:\\Windows\\system32\\Msimtf.dll",
                "UxTheme.dll",
                "Normaliz.dll",
                "C:\\Windows\\system32\\mswsock.dll",
                "VERSION.dll",
                "ADVAPI32.dll",
                "rpcrt4.dll",
                "advapi32",
                "SETUPAPI.dll",
                "WS2_32.dll",
                "C:\\Windows\\system32\\MSCTF.dll",
                "user32.dll",
                "oleaut32.dll"
            ],
            "file_opened": [
                "C:\\",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\bba29d17b073ee4e9bd59e0d2083e3f5d97b4ebd284902157f22864a8a385181.bin.html",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
                "C:\\Users\\cuck\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\",
                "C:\\Windows\\WindowsShell.manifest",
                "C:\\Windows\\System32\\ras\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat",
                "C:\\Windows\\System32\\en-US\\MSCTF.dll.mui",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019040920190410\\",
                "C:\\Windows\\System32\\en-US\\urlmon.dll.mui",
                "C:\\Windows\\System32\\en-US\\jscript.dll.mui",
                "C:\\Users\\",
                "C:\\Users\\cuck\\AppData",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020031220200313\\",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\",
                "C:\\Users",
                "C:\\Users\\cuck\\AppData\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020031220200313\\index.dat",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\",
                "C:\\Users\\cuck\\Desktop\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\",
                "C:\\Windows\\System32\\shell32.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019040920190410\\index.dat",
                "C:\\Users\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft",
                "C:\\Users\\cuck",
                "C:\\Windows\\System32\\en-US\\MLANG.dll.mui",
                "C:\\Users\\cuck\\AppData\\Local\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows",
                "C:\\Users\\cuck\\AppData\\Local\\Temp",
                "C:\\Users\\cuck\\AppData\\Local",
                "C:\\Windows\\System32\\wininet.dll",
                "C:\\Windows\\System32\\oleaccrc.dll",
                "C:\\Users\\cuck\\Favorites\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds Cache\\",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat",
                "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\",
                "C:\\Windows\\Fonts\\staticcache.dat",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat",
                "C:\\Windows\\System32\\rsaenh.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat",
                "C:\\Windows\\System32\\ieframe.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\"
            ],
            "file_failed": [
                "\\Device\\NetBT_Tcpip6_{46C6AD23-CFC8-4177-B38F-6C28F239EB0D}",
                "\\Device\\RasAcd",
                "\\Device\\NetBT_Tcpip6_{AEFD33F3-CC73-4821-AD44-6915063E7FB1}",
                "C:\\ProgramData\\Microsoft\\Network\\Connections\\Pbk\\",
                "\\DEVICE\\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History",
                "C:\\Users\\cuck",
                "\\DEVICE\\NETBT_TCPIP_{46C6AD23-CFC8-4177-B38F-6C28F239EB0D}",
                "C:\\tj.js",
                "C:\\Users\\cuck\\AppData\\Roaming",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files",
                "\\Device\\NetBT_Tcpip_{AEFD33F3-CC73-4821-AD44-6915063E7FB1}",
                "\\Device\\NetBT_Tcpip6_{EF381EA0-4D07-418D-A490-68AF67CE948B}",
                "C:\\Users\\cuck\\Favorites",
                "C:\\Users\\cuck\\AppData\\Local",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies"
            ],
            "guid": [
                "{275c23e2-3747-11d0-9fea-00aa003f8646}",
                "{9ba05972-f6a8-11cf-a442-00a0c90a8f39}",
                "{dccfc164-2b38-11d2-b7ec-00c04f8f5d9a}",
                "{25336920-03f9-11cf-8fd0-00aa00686f13}",
                "{dcb00c01-570f-4a9b-8d69-199fdba5723b}",
                "{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
                "{00000146-0000-0000-c000-000000000046}",
                "{6c736dc1-ab0d-11d0-a2ad-00a0c90f27e8}",
                "{d0074ffd-570f-4a9b-8d69-199fdba5723b}",
                "{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}",
                "{000214e6-0000-0000-c000-000000000046}",
                "{00000001-0000-0000-c000-000000000046}",
                "{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}",
                "{ff393560-c2a7-11cf-bff4-444553540000}",
                "{00000323-0000-0000-c000-000000000046}",
                "{e7e4bc40-e76a-11ce-a9bb-00aa004ae837}",
                "{85cb6900-4d95-11cf-960c-0080c7f4ee85}",
                "{79eac9ef-baf9-11ce-8c82-00aa004ba90b}",
                "{dcb00000-570f-4a9b-8d69-199fdba5723b}",
                "{50d5107a-d278-4871-8989-f4ceaaf59cfc}",
                "{7b8a2d95-0ac9-11d1-896c-00c04fb6bfc4}",
                "{bb1a2ae1-a4f9-11cf-8f20-00805f2cd064}",
                "{a47979d2-c419-11d9-a5b4-001185ad2b89}",
                "{6c736db1-bd94-11d0-8a23-00aa00b58e10}",
                "{3050f406-98b5-11cf-bb82-00aa00bdce0b}",
                "{08c0e040-62d1-11d1-9326-0060b067b86e}"
            ]
        },
        "first_seen": 1584085986.905874,
        "ppid": 2816
    }
]

Signatures

[
    {
        "markcount": 1,
        "families": [],
        "description": "Executes javascript",
        "severity": 2,
        "marks": [
            {
                "call": {
                    "category": "iexplore",
                    "status": 1,
                    "stacktrace": [],
                    "api": "COleScript_Compile",
                    "return_value": 0,
                    "arguments": {
                        "type": "JScript - window script block",
                        "script": "\r\nvar _hmt = window._hmt || [];\r\n   (function(){\r\nvar hm = document.createElement(\"script\");\r\nhm.src = \"https:\/\/hm.baidu.com\/hm.js?8f502b644a6ba98a1d0d732883af5ee6\";\r\nvar s = document.getElementsByTagName(\"script\")[0]; \r\ns.parentNode.insertBefore(hm, s);\r\n var bp = document.createElement('script');\r\nvar curProtocol = window.location.protocol.split(':')[0];\r\nif (curProtocol === 'https') {\r\n bp.src = 'https:\/\/zz.bdstatic.com\/linksubmit\/push.js';\r\n        }\r\nelse {\r\n bp.src = ' http:\/\/push.zhanzhang.baidu.com\/push.js ';\r\n}\r\nvar s = document.getElementsByTagName(\"script\")[0];\r\ns.parentNode.insertBefore(bp, s);\r\n       var canonicalURL, curProtocol;\r\n       \/\/Get the  tag       var x=document.getElementsByTagName(\"link\");\r\n       \/\/Find the last canonical URL \r\n       if(x.length > 0){\r\n           for (i=0;iYara
The Yara rules did not detect anything in the file.
Network
{
    "tls": [],
    "udp": [
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 546,
            "time": 3.0920329093933105,
            "dport": 137,
            "sport": 137
        },
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 8466,
            "time": 9.078994989395142,
            "dport": 138,
            "sport": 138
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 10310,
            "time": 5.0207839012146,
            "dport": 5355,
            "sport": 49840
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 10630,
            "time": 2.9305129051208496,
            "dport": 5355,
            "sport": 51001
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 10950,
            "time": 1.063856840133667,
            "dport": 5355,
            "sport": 53595
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 11278,
            "time": 3.0793957710266113,
            "dport": 5355,
            "sport": 53848
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 11606,
            "time": 1.5658400058746338,
            "dport": 5355,
            "sport": 54255
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 11934,
            "time": -0.08744120597839355,
            "dport": 5355,
            "sport": 55314
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 12262,
            "time": 3.0882039070129395,
            "dport": 5355,
            "sport": 55880
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 12590,
            "time": 1.5945539474487305,
            "dport": 1900,
            "sport": 1900
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 32000,
            "time": 1.0972299575805664,
            "dport": 3702,
            "sport": 49152
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 40384,
            "time": 3.1105339527130127,
            "dport": 1900,
            "sport": 53598
        }
    ],
    "dns_servers": [],
    "http": [],
    "icmp": [],
    "smtp": [],
    "tcp": [],
    "smtp_ex": [],
    "mitm": [],
    "hosts": [],
    "pcap_sha256": "77354a2e14736a7de2a9c4191d2d206204de489caf5d453bfd3b046001fe8ac5",
    "dns": [],
    "http_ex": [],
    "domains": [],
    "dead_hosts": [],
    "sorted_pcap_sha256": "9ea1e1baeb56931aadd08d62a53048fbf6dd5787496f4d114dc768eb17aca72e",
    "irc": [],
    "https_ex": []
}
Screenshots
Hashes [?]
Property Value
MD5 aef3678c125312346aaa03466c687eb6
SHA256 bba29d17b073ee4e9bd59e0d2083e3f5d97b4ebd284902157f22864a8a385181
Error Messages
These are some of the error messages that can appear related to crypt_2_3119.exe:
crypt_2_3119.exe has encountered a problem and needs to close. We are sorry for the inconvenience.
crypt_2_3119.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.
crypt_2_3119.exe has stopped working.
End Program - crypt_2_3119.exe. This program is not responding.
crypt_2_3119.exe is not a valid Win32 application.
crypt_2_3119.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.
What will you do with the file?
To help other users, please let us know what you will do with the file:
    I will keep it
    I will remove it


Malware or legitimate?
If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.
Please select the option that best describe your thoughts on the information provided on this web page
I now have a good idea of whether the file is legitimate or malware
I still do not know whether the file is legitimate or malware - I need more information
View results
Free online surveys
And now some shameless self promotion ;)
Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.

If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.

Comments
Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.
I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.
No comments posted yet.
Leave a reply


Your nickname (required):




Just to make sure you are human and not a spam bot, please answer the following question: How many eyes does a cat have? (required):




Your comment:

Property	Value
MD5	aef3678c125312346aaa03466c687eb6
SHA256	bba29d17b073ee4e9bd59e0d2083e3f5d97b4ebd284902157f22864a8a385181