Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

b12ffd16d2...72.exe

windows7-x64

8

b12ffd16d2...72.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    152s
  • max time network
    196s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    05/12/2022, 17:00 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe

  • Size

    557KB

  • MD5

    d06b7b880d1f45f6339cfb88ff3a1e8c

  • SHA1

    4b42bd4bc4b3d81094e87b48f07f7dd813d9266e

  • SHA256

    b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472

  • SHA512

    b2b017b8a8c1b1fee984477faccab87cf49a188d0d32b86f172ee62ce3920c2a9974ea889118047a2d02e182ea12705a64cb0aa220d84921d4236cd1cf89aeb2

  • SSDEEP

    12288:NGprxNCP22qurlbSoweEIdo94haP+qeRMMzZ:NGxxNCxDpOreEgo94haPviMMzZ

Score
8/10
spywarestealerupx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Loads dropped DLL 1 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Drops file in Program Files directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies system certificate store 2 TTPs 6 IoCs
    evasionspywaretrojan
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
    "C:\Users\Admin\AppData\Local\Temp\b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Modifies Internet Explorer settings
    • Modifies system certificate store
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1440
    • C:\Users\Admin\AppData\Local\Temp\b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      "C:\Users\Admin\AppData\Local\Temp\b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe" /_ShowProgress
      2⤵
        PID:900

    Network

    • flag-unknown
      DNS
      cdneu.solvefile.com
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      8.8.8.8:53
      Request
      cdneu.solvefile.com
      IN A
      Response
      cdneu.solvefile.com
      IN A
      185.83.214.222
    • flag-unknown
      DNS
      cdnus.solvefile.com
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      8.8.8.8:53
      Request
      cdnus.solvefile.com
      IN A
      Response
      cdnus.solvefile.com
      IN A
      185.83.214.222
    • flag-unknown
      GET
      http://cdnus.solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      185.83.214.222:80
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=102400-204799
      Accept: */*
      Host: cdnus.solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 302 Found
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:43 GMT
      Content-Type: text/html; charset=UTF-8
      Content-Length: 0
      Connection: keep-alive
      X-Powered-By: PHP/7.1.33-50+ubuntu20.04.1+deb.sury.org+2
      Cache-Control: max-age=2592000
      Access-Control-Allow-Origin: http://cdnus.solvefile.com
      Location: http://solvefile.com/Prod/PDFCreator-v2.cis
    • flag-unknown
      GET
      http://cdneu.solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      185.83.214.222:80
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=0-102399
      Accept: */*
      Host: cdneu.solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 302 Found
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:43 GMT
      Content-Type: text/html; charset=UTF-8
      Content-Length: 0
      Connection: keep-alive
      X-Powered-By: PHP/7.1.33-50+ubuntu20.04.1+deb.sury.org+2
      Cache-Control: max-age=2592000
      Access-Control-Allow-Origin: http://cdneu.solvefile.com
      Location: http://solvefile.com/Prod/PDFCreator-v2.cis
    • flag-unknown
      DNS
      os.solvefile.com
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      8.8.8.8:53
      Request
      os.solvefile.com
      IN A
      Response
      os.solvefile.com
      IN A
      185.83.214.222
    • flag-unknown
      POST
      http://os.solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      185.83.214.222:80
      Request
      POST /fx/v1.0.1/?v=2.0&c=1939254258 HTTP/1.1
      Accept: */*
      Host: os.solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Content-Length: 216
      Cache-Control: no-cache
      Response
      HTTP/1.1 302 Found
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:44 GMT
      Content-Type: text/html; charset=UTF-8
      Content-Length: 0
      Connection: keep-alive
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Cache-Control: max-age=2592000
      Access-Control-Allow-Origin: http://os.solvefile.com
      Location: http://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
    • flag-unknown
      DNS
      solvefile.com
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      8.8.8.8:53
      Request
      solvefile.com
      IN A
      Response
      solvefile.com
      IN A
      45.88.202.115
    • flag-unknown
      GET
      http://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:80
      Request
      GET /fx/v1.0.1/?v=2.0&c=1939254258 HTTP/1.1
      Accept: */*
      Connection: Keep-Alive
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Cache-Control: no-cache
      Host: solvefile.com
      Response
      HTTP/1.1 301 Moved Permanently
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:44 GMT
      Content-Type: text/html
      Content-Length: 162
      Connection: keep-alive
      Location: https://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
    • flag-unknown
      GET
      http://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:80
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=102400-204799
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 301 Moved Permanently
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:45 GMT
      Content-Type: text/html
      Content-Length: 162
      Connection: keep-alive
      Location: https://solvefile.com/Prod/PDFCreator-v2.cis
    • flag-unknown
      GET
      http://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:80
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=204800-307199
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 301 Moved Permanently
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:45 GMT
      Content-Type: text/html
      Content-Length: 162
      Connection: keep-alive
      Location: https://solvefile.com/Prod/PDFCreator-v2.cis
    • flag-unknown
      GET
      http://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:80
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=0-102399
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 301 Moved Permanently
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:45 GMT
      Content-Type: text/html
      Content-Length: 162
      Connection: keep-alive
      Location: https://solvefile.com/Prod/PDFCreator-v2.cis
    • flag-unknown
      GET
      https://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /fx/v1.0.1/?v=2.0&c=1939254258 HTTP/1.1
      Accept: */*
      Connection: Keep-Alive
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Host: solvefile.com
      Cache-Control: no-cache
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:59 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:26:59 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=102400-204799
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:48 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu20.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:26:48 GMT
      Cache-Control: max-age=900
    • flag-unknown
      DNS
      apps.identrust.com
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      8.8.8.8:53
      Request
      apps.identrust.com
      IN A
      Response
      apps.identrust.com
      IN CNAME
      identrust.edgesuite.net
      identrust.edgesuite.net
      IN CNAME
      a1952.dscq.akamai.net
      a1952.dscq.akamai.net
      IN A
      104.109.143.75
      a1952.dscq.akamai.net
      IN A
      104.109.143.91
    • flag-unknown
      DNS
      apps.identrust.com
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      8.8.8.8:53
      Request
      apps.identrust.com
      IN A
      Response
      apps.identrust.com
      IN CNAME
      identrust.edgesuite.net
      identrust.edgesuite.net
      IN CNAME
      a1952.dscq.akamai.net
      a1952.dscq.akamai.net
      IN A
      104.109.143.75
      a1952.dscq.akamai.net
      IN A
      104.109.143.91
    • flag-unknown
      GET
      http://apps.identrust.com/roots/dstrootcax3.p7c
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      104.109.143.75:80
      Request
      GET /roots/dstrootcax3.p7c HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      User-Agent: Microsoft-CryptoAPI/6.1
      Host: apps.identrust.com
      Response
      HTTP/1.1 200 OK
      X-XSS-Protection: 1; mode=block
      Strict-Transport-Security: max-age=15768000
      X-Frame-Options: SAMEORIGIN
      X-Content-Type-Options: nosniff
      Content-Security-Policy: default-src 'self' *.identrust.com
      Last-Modified: Mon, 20 Jun 2022 20:24:00 GMT
      ETag: "37d-5e1e6e25c9800"
      Accept-Ranges: bytes
      Content-Length: 893
      X-Content-Type-Options: nosniff
      X-Frame-Options: sameorigin
      Content-Type: application/pkcs7-mime
      Cache-Control: max-age=3600
      Expires: Sat, 10 Dec 2022 02:11:48 GMT
      Date: Sat, 10 Dec 2022 01:11:48 GMT
      Connection: keep-alive
    • flag-unknown
      GET
      http://apps.identrust.com/roots/dstrootcax3.p7c
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      104.109.143.75:80
      Request
      GET /roots/dstrootcax3.p7c HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      User-Agent: Microsoft-CryptoAPI/6.1
      Host: apps.identrust.com
      Response
      HTTP/1.1 200 OK
      X-XSS-Protection: 1; mode=block
      Strict-Transport-Security: max-age=15768000
      X-Frame-Options: SAMEORIGIN
      X-Content-Type-Options: nosniff
      Content-Security-Policy: default-src 'self' *.identrust.com
      Last-Modified: Mon, 20 Jun 2022 20:24:00 GMT
      ETag: "37d-5e1e6e25c9800"
      Accept-Ranges: bytes
      Content-Length: 893
      X-Content-Type-Options: nosniff
      X-Frame-Options: sameorigin
      Content-Type: application/pkcs7-mime
      Cache-Control: max-age=3600
      Expires: Sat, 10 Dec 2022 02:11:48 GMT
      Date: Sat, 10 Dec 2022 01:11:48 GMT
      Connection: keep-alive
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=102400-204799
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:52 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:26:52 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=512000-614399
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:11:58 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu20.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:26:58 GMT
      Cache-Control: max-age=900
    • flag-unknown
      POST
      http://os.solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      185.83.214.222:80
      Request
      POST /fx/v1.0.1/?v=2.0&c=1939254258 HTTP/1.1
      Accept: */*
      Host: os.solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Content-Length: 216
      Cache-Control: no-cache
      Response
      HTTP/1.1 302 Found
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:00 GMT
      Content-Type: text/html; charset=UTF-8
      Content-Length: 0
      Connection: keep-alive
      X-Powered-By: PHP/7.1.33-50+ubuntu20.04.1+deb.sury.org+2
      Cache-Control: max-age=2592000
      Access-Control-Allow-Origin: http://os.solvefile.com
      Location: http://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
    • flag-unknown
      GET
      http://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:80
      Request
      GET /fx/v1.0.1/?v=2.0&c=1939254258 HTTP/1.1
      Accept: */*
      Connection: Keep-Alive
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Cache-Control: no-cache
      Host: solvefile.com
      Response
      HTTP/1.1 301 Moved Permanently
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:01 GMT
      Content-Type: text/html
      Content-Length: 162
      Connection: keep-alive
      Location: https://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
    • flag-unknown
      GET
      https://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /fx/v1.0.1/?v=2.0&c=1939254258 HTTP/1.1
      Accept: */*
      Connection: Keep-Alive
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Host: solvefile.com
      Cache-Control: no-cache
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:01 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:01 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=102400-204799
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:04 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:04 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=204800-307199
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:06 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:06 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=409600-511999
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:12 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:12 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=102400-204799
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:17 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:17 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=204800-307199
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:18 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:18 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=307200-409599
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:29 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:29 GMT
      Cache-Control: max-age=900
    • flag-unknown
      DNS
      www.microsoft.com
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      8.8.8.8:53
      Request
      www.microsoft.com
      IN A
      Response
      www.microsoft.com
      IN CNAME
      www.microsoft.com-c-3.edgekey.net
      www.microsoft.com-c-3.edgekey.net
      IN CNAME
      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
      IN CNAME
      e13678.dscb.akamaiedge.net
      e13678.dscb.akamaiedge.net
      IN A
      104.123.41.162
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=102400-204799
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:30 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:30 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=307200-409599
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:42 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu20.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:42 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=512000-614399
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:44 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:44 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=0-102399
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:12:49 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:27:49 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=204800-307199
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=307200-409599
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:13:00 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu20.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:28:00 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=409600-511999
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:13:00 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:28:00 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=307200-409599
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:13:10 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:28:10 GMT
      Cache-Control: max-age=900
    • flag-unknown
      GET
      https://solvefile.com/Prod/PDFCreator-v2.cis
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Remote address:
      45.88.202.115:443
      Request
      GET /Prod/PDFCreator-v2.cis HTTP/1.1
      Range: bytes=409600-511999
      Accept: */*
      Host: solvefile.com
      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Server: nginx
      Date: Sat, 10 Dec 2022 01:13:10 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept-Encoding
      X-Powered-By: PHP/7.1.33-50+ubuntu22.04.1+deb.sury.org+2
      Access-Control-Allow-Origin: http://solvefile.com
      Vary: Accept-Encoding
      Expires: Sat, 10 Dec 2022 01:28:10 GMT
      Cache-Control: max-age=900
    • 185.83.214.222:80
      http://cdnus.solvefile.com/Prod/PDFCreator-v2.cis
      http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      477 B
       571 B
       6
      5

      HTTP Request

      GET http://cdnus.solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      302
    • 185.83.214.222:80
      http://cdneu.solvefile.com/Prod/PDFCreator-v2.cis
      http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      472 B
       571 B
       6
      5

      HTTP Request

      GET http://cdneu.solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      302
    • 185.83.214.222:80
      http://os.solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      744 B
       978 B
       7
      6

      HTTP Request

      POST http://os.solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258

      HTTP Response

      302
    • 45.88.202.115:80
      http://solvefile.com/Prod/PDFCreator-v2.cis
      http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      951 B
       1.9kB
       8
      9

      HTTP Request

      GET http://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258

      HTTP Response

      301

      HTTP Request

      GET http://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      301

      HTTP Request

      GET http://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      301
    • 45.88.202.115:80
      http://solvefile.com/Prod/PDFCreator-v2.cis
      http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      472 B
       960 B
       6
      5

      HTTP Request

      GET http://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      301
    • 45.88.202.115:443
      https://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.4kB
       28.1kB
       20
      29

      HTTP Request

      GET https://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.4kB
       27.5kB
       20
      27

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 104.109.143.75:80
      http://apps.identrust.com/roots/dstrootcax3.p7c
      http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      375 B
       1.7kB
       5
      5

      HTTP Request

      GET http://apps.identrust.com/roots/dstrootcax3.p7c

      HTTP Response

      200
    • 104.109.143.75:80
      http://apps.identrust.com/roots/dstrootcax3.p7c
      http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      375 B
       1.7kB
       5
      5

      HTTP Request

      GET http://apps.identrust.com/roots/dstrootcax3.p7c

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.3kB
       23.8kB
       18
      24

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.2kB
       23.7kB
       17
      23

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 185.83.214.222:80
      http://os.solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      744 B
       978 B
       7
      6

      HTTP Request

      POST http://os.solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258

      HTTP Response

      302
    • 45.88.202.115:80
      http://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258
      http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      429 B
       553 B
       5
      4

      HTTP Request

      GET http://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258

      HTTP Response

      301
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      2.0kB
       47.2kB
       29
      43

      HTTP Request

      GET https://solvefile.com/fx/v1.0.1/?v=2.0&c=1939254258

      HTTP Response

      200

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.3kB
       23.8kB
       18
      24

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.3kB
       23.8kB
       18
      24

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.3kB
       23.3kB
       18
      23

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.3kB
       23.8kB
       18
      24

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.2kB
       23.8kB
       17
      23

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.2kB
       23.7kB
       17
      23

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.2kB
       23.7kB
       17
      23

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.3kB
       23.8kB
       18
      24

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      solvefile.com
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      186 B
       88 B
       4
      2
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.5kB
       27.4kB
       21
      26

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.3kB
       18.6kB
       18
      19

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.2kB
       23.7kB
       17
      23

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.2kB
       23.8kB
       17
      24

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      solvefile.com
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      94 B
       48 B
       2
      1
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.2kB
       23.3kB
       17
      22

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 45.88.202.115:443
      https://solvefile.com/Prod/PDFCreator-v2.cis
      tls, http
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      1.3kB
       23.3kB
       18
      23

      HTTP Request

      GET https://solvefile.com/Prod/PDFCreator-v2.cis

      HTTP Response

      200
    • 8.8.8.8:53
      cdneu.solvefile.com
      dns
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      65 B
       81 B
       1
      1

      DNS Request

      cdneu.solvefile.com

      DNS Response

      185.83.214.222

    • 8.8.8.8:53
      cdnus.solvefile.com
      dns
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      65 B
       81 B
       1
      1

      DNS Request

      cdnus.solvefile.com

      DNS Response

      185.83.214.222

    • 8.8.8.8:53
      os.solvefile.com
      dns
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      62 B
       78 B
       1
      1

      DNS Request

      os.solvefile.com

      DNS Response

      185.83.214.222

    • 8.8.8.8:53
      solvefile.com
      dns
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      59 B
       75 B
       1
      1

      DNS Request

      solvefile.com

      DNS Response

      45.88.202.115

    • 8.8.8.8:53
      apps.identrust.com
      dns
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      64 B
       165 B
       1
      1

      DNS Request

      apps.identrust.com

      DNS Response

      104.109.143.75
      104.109.143.91

    • 8.8.8.8:53
      apps.identrust.com
      dns
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      64 B
       165 B
       1
      1

      DNS Request

      apps.identrust.com

      DNS Response

      104.109.143.75
      104.109.143.91

    • 8.8.8.8:53
      www.microsoft.com
      dns
      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      63 B
       230 B
       1
      1

      DNS Request

      www.microsoft.com

      DNS Response

      104.123.41.162

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • \Users\Admin\AppData\Local\Temp\ICReinstall_b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472.exe
      Filesize

      557KB

      MD5

      d06b7b880d1f45f6339cfb88ff3a1e8c

      SHA1

      4b42bd4bc4b3d81094e87b48f07f7dd813d9266e

      SHA256

      b12ffd16d2782a1109d55148b3425e65e4911ba6b4aa29f78b05f08b795ae472

      SHA512

      b2b017b8a8c1b1fee984477faccab87cf49a188d0d32b86f172ee62ce3920c2a9974ea889118047a2d02e182ea12705a64cb0aa220d84921d4236cd1cf89aeb2

      Download Submit

    • memory/900-61-0x0000000000400000-0x0000000000522000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/900-63-0x0000000000400000-0x0000000000522000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/1440-54-0x0000000000400000-0x0000000000522000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/1440-55-0x00000000766F1000-0x00000000766F3000-memory.dmp

      Filesize

      8KB

      Download

    • memory/1440-56-0x0000000000400000-0x0000000000522000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/1440-57-0x0000000000400000-0x0000000000522000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/1440-62-0x0000000000400000-0x0000000000522000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/1440-64-0x0000000003B20000-0x0000000003C42000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/1440-68-0x0000000004BA0000-0x0000000004BB0000-memory.dmp

      Filesize

      64KB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.